Device for displaying flight characteristics of an aircraft, aircraft instruments, and related  method

ABSTRACT

A device for displaying flight characteristics of an aircraft is provided. The device includes a display for the selective display of flight characteristics of an aircraft, as a function of a state of credibility assigned to measurements from static pressure, total pressure and incidence sensors, configured for selectively displaying a primary set of flight characteristics comprising at least one flight characteristic coming from a measurement from one of said sensors, when the measurements from said sensors are deemed reliable, and a secondary set of flight characteristics, distinct from said primary set, comprising at least one secondary flight characteristic designed to replace a counterpart flight characteristic from the primary set, when the measurements from at least one sensor are deemed unreliable, said secondary flight characteristic being independent of any measurement by the or each sensor deemed unreliable done when the measurements from that sensor are deemed unreliable.

The present invention relates to a device for displaying flight characteristics of an aircraft to a crew of the aircraft.

BACKGROUND

The flight operation and control of an aircraft is dependent on the knowledge of the flight parameters of the latter, such as its speed relative to the ambient air, its altitude and incidence.

These parameters are determined by means of sensor probes located on the fuselage of the aircraft. In a known manner, these sensor probes include static pressure sensors, Pitot probes for measuring the total pressure, incidence probes mounted on a pneumatic device or a vane/paddle type device, and total temperature probes.

These probes are then connected to the means for determining the corresponding magnitude or quantity. In particular, an anemometer determines the speed of the aircraft relative to the air based on the measurements of total and static pressure, and an altimeter determines the altitude of the aircraft based on the measurements of static pressure.

These measurements are then pooled and displayed on a display device which constitutes a central information source based on which the flight operation and control of the aircraft is carried out.

In a known manner, the incidence probes and pressure probes are in the form of vanes and tubes protruding from the skin of the aircraft. They are thus exposed to meteorological or mechanical factors which can affect or alter the operation thereof, in particular by clogging the orifices of these probes with frost or dust or insects, or by blocking the vane devices.

Such failures lead to the generation of incorrect measurement readings, and in particular the display of false incidences, speeds and/or altitudes that may lead to the pilot performing inappropriate manoeuvres. For example, false flight control information can lead to the stalling of the aircraft or loss of control thereof on account of excessive speed.

In order to minimise the consequences of such malfunctions and failures, aviation regulations require aircraft manufacturers to provide for redundant means for measuring these critical features.

Thus, aircraft typically include at least one stand by sensor probe that is identical to each probe that may likely fail. However, this solution has not proven to be entirely satisfactory.

Indeed, the existing stand by sensor probes are for the most part of the protruding type and as a consequence present the same risks of malfunction or failure as the probes that they are intended to eventually replace.

Thus, in the event of the malfunction or failure of measurement probes, no reliable measurements are provided to the pilot.

Moreover, the pilot does not have any available means for verifying the reliability of the data and information provided by the sensor probes.

SUMMARY OF THE INVENTION

An object of the invention is thus related to detecting any possible malfunctions of the aircraft's sensors so as to be able to alert the pilot to these malfunctions and to provide them with reliable alternative data and information.

To this end, the object of the invention thus relates to a device of the aforementioned type, characterized in that it comprises means for the selective display of flight characteristics of the aircraft, as a function of a state of credibility assigned to measurements from sensors of the aircraft, said sensors comprising static pressure, total pressure and incidence sensors of the aircraft, said selective display means comprising means for selectively displaying:

-   -   a primary set of flight characteristics comprising at least one         flight characteristic coming from at least one measurement from         one of said static pressure, total pressure and incidence         sensors, when the measurements from said static pressure, total         pressure and incidence sensors are deemed reliable, and     -   at least one secondary set of flight characteristics, distinct         from said primary set, comprising at least one secondary flight         characteristic designed to replace a counterpart flight         characteristic from the primary set, when the measurements from         at least one sensor from among said static pressure, total         pressure and incidence sensors are deemed unreliable, said         secondary flight characteristic being independent of any         measurement by the or each sensor deemed unreliable done when         the measurements from that sensor are deemed unreliable.

According to particular embodiments, the device includes one or more of the following characteristic features, taken into consideration individually or in accordance with any technically possible combination:

-   -   said primary set of flight characteristics comprises at least         one characteristic chosen from among:         -   at least one piece of primary speed information of the             aircraft determined from measurements by said static             pressure and total pressure sensors,         -   a primary altitude of the aircraft determined from             measurements by said static pressure sensor, and         -   an incidence of the aircraft, determined from measurements             of said incidence sensor;     -   said secondary set of flight characteristics comprises at least         one characteristic chosen from among:         -   at least one piece of secondary speed information             independent of any measurement from the or each sensor             deemed unreliable done when the measurements from that             sensor are deemed unreliable, and         -   a secondary altitude of the aircraft, independent of any             measurement by the or each sensor deemed unreliable done             when the measurements from that sensor are deemed             unreliable;     -   said secondary set of flight characteristics is chosen from         among:         -   a first secondary set of flight characteristics, when the             measurements from said incidence sensor are deemed reliable             and the measurements from at least one sensor from among the             static pressure and total pressure sensors are deemed             unreliable, and         -   a second secondary set of flight characteristics, separate             from said first secondary set, when the measurements from             said incidence sensor are deemed unreliable;     -   said selective display means comprise at least one speed         indicator, capable of selectively displaying:         -   a piece of primary speed information of the aircraft             determined from measurements from said static pressure and             total pressure sensors, when the measurements from said             static pressure and total pressure sensors are deemed             reliable,         -   a piece of secondary speed information independent of the             measurements from said static pressure and total pressure             sensors, when the measurements from at least one sensor from             among said static pressure and total pressure sensors are             deemed unreliable;     -   said speed indicator comprises:         -   a graduated speed scale, and         -   at least one speed symbol, positioned across from said             graduated speed scale, indicating the value of the piece of             primary speed information when the measurements from said             static pressure, total pressure and incidence sensors are             deemed reliable, or the value of the piece of secondary             speed information when the measurements from at least one             sensor from among said static pressure, total pressure and             incidence sensors are deemed unreliable;     -   said selective display means comprise an altitude indicator,         capable of selectively displaying:         -   a primary altitude of the aircraft, determined from             measurements (P_(S), P_(T)) by said static pressure sensor,             when the measurements from said static pressure, total             pressure and incidence sensors are deemed reliable, and a             standard calibration of the altitude is selected,         -   a corrected altitude of the aircraft, determined from             measurements (P_(S), P_(T)) by said static pressure sensor,             when the measurements from said static pressure, total             pressure and incidence sensors are deemed reliable, and a             calibration different from the standard calibration is             chosen,         -   a first secondary altitude of the aircraft, when the             measurements from at least one sensor from among said static             pressure, total pressure and incidence sensors are deemed             unreliable, and a standard calibration of the altitude is             chosen, said first secondary altitude being dependent on             static pressure measurements from said static pressure             sensor if said sensor is deemed reliable, and independent of             measurements from said static pressure sensor done when the             measurements from that sensor are deemed unreliable, when             the measurements from said static pressure sensor are deemed             unreliable,         -   a second secondary altitude of the aircraft, when the             measurements from at least one sensor from among said static             pressure, total pressure and incidence sensors are deemed             unreliable, and a calibration of the altitude above the             geoid is chosen, said second secondary altitude being             independent of the static pressure measurements from said             static pressure sensor.     -   said altitude indicator comprises:         -   a graduated altitude scale,         -   at least one altitude symbol, positioned across from said             graduated altitude scale, indicating the value of the             primary altitude or the corrected altitude when the             measurements from said static pressure, total pressure and             incidence sensors are deemed reliable, or the value of the             first or second secondary altitude when the measurements             from at least one sensor from among said static pressure,             total pressure and incidence sensors are deemed unreliable,             and         -   a symbol indicating the type of calibration of the altitude             indicated by said altitude symbol;     -   the display device is capable of displaying, on display means,         alert messages capable of informing the crew, when the         measurements from at least one sensor from among said static         pressure, total pressure and incidence sensors are deemed         unreliable, that said measurements are deemed unreliable;     -   said messages are chosen from among visual signals and audio         signals, said messages advantageously being text or symbolic         messages displayed on a location dedicated to the display of         failure messages of the aircraft.

The object of the invention also relates to an instrumentation for an aircraft, comprising:

-   -   a computer capable of computing at least one secondary flight         characteristic when the measurements from at least one sensor         from among the static pressure, total pressure and incidence         sensors of the aircraft are deemed unreliable, said secondary         flight characteristic being independent of any measurement of         the or each sensor deemed unreliable done when the measurements         from that sensor are deemed unreliable,     -   a display device according to the invention.

The object of the invention also relates to a method for displaying flight characteristics of an aircraft intended for a crew of the aircraft, characterized in that it comprises determining a state of credibility of measurements from sensors of said aircraft, and selectively displaying flight characteristics of the aircraft, as a function of the state of credibility assigned to said measurements, by at least one display device according to the invention.

According to particular embodiments, the method includes one or more of the following characteristic features, taken into account individually or in accordance with any technically possible combination:

-   -   the step for determining a state of credibility of measurements         from sensors comprises:         -   determining a state of reliability of the measurements from             said static pressure, total pressure and incidence sensors,         -   activating an optimal state of credibility, in which said             selected display means display said primary set of flight             characteristics, if the measurements from said static             pressure, total pressure and incidence sensors are deemed             reliable,         -   activating at least one non-optimal state of credibility, in             which said selected display means display said secondary set             of flight characteristics, if the measurements from at least             one sensor from among said static pressure, total pressure             and incidence sensors are deemed unreliable;     -   said secondary set of flight characteristics is chosen from         among a first secondary set of flight characteristics and a         second secondary set of flight characteristics, distinct from         said first secondary set of flight characteristics, and the step         for determining a state of credibility of measurements from         sensors comprises, when the non-optimal state of credibility is         activated:         -   determining a state of reliability of measurements from said             incidence sensor,         -   activating a state of high credibility, in which said             selected display means display said first secondary set of             flight characteristics, if the measurements from said             incidence sensor are deemed reliable,         -   activating a state of low credibility in which said             selective display means display said second secondary set of             flight characteristics, if the measurements from said             incidence sensor are deemed unreliable.

BRIEF SUMMARY OF THE DRAWINGS

The invention will be better understood upon review of the description which follows, provided solely by way of example and with reference made to the following drawings, in which:

FIG. 1 schematically illustrates an aircraft under conventional flight conditions;

FIG. 2 is a general block diagram representing a system for determining a state of credibility of measurements made by sensors of the aircraft;

FIG. 3 is a block diagram illustrating the method according to the invention;

FIG. 4 is a block diagram illustrating the steps to be implemented in order to assess the reliability of incidence measurements according to one embodiment;

FIG. 5 is a block diagram representing the steps to be implemented in order to assess the reliability of pressure measurements according to one embodiment;

FIG. 6 illustrates a mode of representation by an auxiliary display device of a first set of data values relating to the flight according to an embodiment of the invention;

FIG. 7 illustrates a mode of representation by the auxiliary display device of FIG. 6 of a second set of data values relating to the flight;

FIG. 8 illustrates a mode of representation by the auxiliary display device of FIG. 6 of a third set of data values relating to the flight.

DETAILED DESCRIPTION

FIG. 1 represents, in a schematic manner, an aircraft 1 in flight to which is applied the method according to the invention.

The aircraft 1 is represented in FIG. 1 by its sole centre of gravity. Its longitudinal axis is oriented along an axis X, which forms with the horizontal A an angle θ known as the aircraft pitch angle. It moves relative to the air along a velocity vector {right arrow over (V_(air))}, that forms with the horizontal A an angle γ_(air) known as the flight path angle of the aircraft. The angle α between the longitudinal axis X of the aircraft 1 and its velocity vector is known as the angle of incidence. These angles thus satisfy the relationship: θ=α+γ_(air).

The true air speed {right arrow over (V_(P))} of the aircraft, which is its speed relative to the air in a horizontal plane, is linked to its speed {right arrow over (V_(S))} relative to the ground in this horizontal plane by the velocity triangle in accordance with the relationship: {right arrow over (V_(P))}={right arrow over (V_(S))}−{right arrow over (W)}, wherein {right arrow over (W)} denotes the wind velocity vector in the horizontal plane.

The system 2 for determination of the parameters of the aircraft 1 according to the invention is represented schematically in FIG. 2. The system 2 is capable of determining the essential characteristics of the aircraft 1 or of the ambient air during the flight, and of assessing the reliability of sensor measurements of the aircraft 1.

This system 2 comprises a central computer 3 equipped with a memory 4. The memory 4 includes in particular correlation look up tables and charts and graphs providing the value of a flight characteristic of the aircraft depending on the value of one or more other characteristics. In particular, the memory 4 includes a standard atmosphere table giving the pressure altitude of the aircraft, denoted by Z_(P), based on the static pressure around the aircraft. This pressure altitude is defined as the altitude that an aircraft would have attained in a standard atmosphere if it was at this static pressure.

The memory 4 also includes a correlation look up table providing the value of a coefficient of lift of the aircraft based on values of the Mach number M and the incidence α of the aircraft. This correlation look up table is derived from flight tests conducted in advance. The memory 4 further includes charts and graphs, such as a chart that makes it possible to determine the weight of the aircraft 1 based on the lift and drag during the initial phase of take off, and on the resulting acceleration.

This system 2 further comprises a plurality of sensors 5, and in particular a static pressure sensor 5 a, a total pressure sensor 5 b, a temperature sensor 5 c, and an incidence sensor 5 d.

The static pressure sensor 5 a is capable of measuring the static pressure P_(S), that is to say the atmospheric pressure at the level of the aircraft. The total pressure sensor 5 b is for example a Pitot probe. It is capable of measuring the total pressure P_(T), the sum of the dynamic pressure P_(dyn) and the static pressure P_(S).

The temperature sensor 5 c is capable of measuring the total temperature, denoted by TAT for “Total Air Temperature”, corresponding to the impact temperature of air in the probe meant to be used for the measurement. This temperature is constant throughout the stream of air that enters the probe.

The total temperature is related to the static temperature of air, denoted by SAT “Static Air Temperature”, and corresponding to the temperature that would be measured by a thermometer in the air mass brought to rest, by the relationship:

$\begin{matrix} {{SAT} = {\frac{TAT}{\left( {1 + {\frac{\gamma - 1}{2}M^{2}}} \right)} \approx \frac{TAT}{\left( {1 + {0.2\; M^{2}}} \right)}}} & (1) \end{matrix}$

where M denotes the Mach number of the aircraft and γ≈1.4 is the adiabatic coefficient of air.

The incidence sensor 5 d is capable of determining the incidence of the aircraft 1.

All of the sensors are connected to the computer 3.

The determination system 2 also comprises an altimeter 6, an anemometer 7, a Mach indicator 8, and an accelerometer 9.

The altimeter 6 is connected to the static pressure sensor 5 a and the computer 3. It is capable of determining the pressure altitude Z_(P) of the aircraft 1 relative to a reference level based on the measurement of the static pressure P_(S). To this end, the altimeter 6 uses for example a standard atmosphere table that includes tabulated values of static pressure as a function of altitude.

The anemometer 7 is connected to the static pressure sensor 5 a and total pressure sensor 5 b and the computer 3. It is capable of determining, based on the static pressure P_(S) and total pressure P_(T), the dynamic pressure P_(dyn)=P_(T)−P_(S), and of inferring from the dynamic pressure the conventional speed V_(C) of the aircraft relative to the air, based on the relationship:

$\begin{matrix} {\frac{P_{dyn}}{101325} = {\left\lbrack {1 + {0.2\left( \frac{V_{C}}{661.471} \right)^{2}}} \right\rbrack^{3.5} - 1}} & (2) \end{matrix}$

where 101325 corresponds to the atmospheric pressure over ground, 661.471 is the speed of sound over ground in knots.

The conventional speed is thus given by:

$\begin{matrix} {V_{C} = {661.471 \cdot \left\lbrack \frac{\left( {\frac{P_{dyn}}{101325} + 1} \right)^{\frac{1}{3,5}} - 1}{0.2} \right\rbrack^{\frac{1}{2}}}} & (3) \end{matrix}$

This conventional speed V_(C) is that which would produce the same dynamic pressure P_(dyn) when flying in the standard atmosphere over ground.

The equivalent of speed EV can be deduced from the pressure altitude Z_(P) and from the Mach number M by:

$\begin{matrix} {{\frac{1}{2}\rho_{0}{EV}^{2}} = {\frac{1}{2}\rho \; a^{2}M^{2}}} & (4) \end{matrix}$

where ρ₀ denotes the density of air on the ground, at the speed of sound and ρ the density of air.

When the Mach number of the aircraft is low (M<0.4), V_(C)≈EV.

The Mach indicator 8 is connected to the static pressure sensor 5 a and the total pressure sensor 5 b and to the computer 3. It is capable of deducing from the total pressure P_(T) and the static pressure P_(S) the Mach number of the aircraft. Thus M_(a) will be used to denote the Mach number as determined by the Mach indicator 8.

The accelerometer 9 includes an inertial navigation unit. It is capable of determining an acceleration vector {right arrow over (J)} of the aircraft, and in particular its components Jx and Jz along the longitudinal axis X of the aircraft and the yaw axis Z of the aircraft 1 respectively.

The determination system 2 further comprises a geographical position sensor, advantageously an altitude sensor, such as a satellite position sensor, for example a GPS sensor 10. This GPS sensor 10 is capable of determining the position of the aircraft 1, in particular its altitude expressed in a conventional manner above the reference geoid WGS 84 (for World Geodetic System), known as altitude GPS Z_(GPS). Based on this position, the system 2 is capable of estimating the horizontal speed {right arrow over (GS)} of the aircraft 1 relative to the ground, the speed V_(Z)(GPS) of the aircraft 1 along a vertical axis B and a reconstituted pressure altitude, denoted by Z_(p)**. The GPS sensor 10 is connected to the computer 3.

The computer 3 is capable of determining, based on a Mach value M of the aircraft, its speed relative to air, known as true air speed and denoted by TAS for “true air speed”, in accordance with the relationship:

TAS=M√{square root over (γR·SAT)}  (5)

where γ is the adiabatic coefficient of air and R is the universal gas constant

The computer 3 is also capable of determining the air speed standard V_(p) of the aircraft, the horizontal projection standard of true air speed TAS, based on the relationship:

TAS² =V _(p) ² +V _(z) ²(GPS)  (6)

The determination system 2 in addition comprises the means 11 for determining the quantity of fuel contained in the fuel tanks of the aircraft 1. The means 11 are connected to the computer 3. These means comprise for example gauges for tanks and flowmeters. The tank gauges are capable of measuring the quantity, in particular the weight of fuel in each tank, enabling the computer 3 to determine the weight of fuel in the aircraft 1. The flowmeters are capable of measuring the mass flow of fuel supplied to each engine, enabling the computer 3 to deduce the weight FU of fuel consumed, and based on an initial measurement of the fuel weight, the weight of fuel remaining.

The aircraft 1 comprises the means 12 for human-machine interface. These means 12 are connected to the determination system 2. They are capable of presenting data and information intended for the crew and in particular the pilot, and receiving instructions from the pilot in particular intended for the determination system 2.

The aircraft 1 thus includes dashboard instruments that are capable of presenting to the pilot data and information relative to the flight of the aircraft 1. In particular, these instruments include conventional display means, capable of displaying the characteristics of the flight derived from the measurements of pressure and incidence by the pressure and incidence sensors.

The aircraft 1 also comprises an auxiliary display device 14. The auxiliary display device 14 includes the means 15 for selectively displaying various different assessments of characteristics of the flight, based on a state of credibility assigned to the measurements made by the sensors, in particular the incidence and pressure sensors.

The auxiliary display device 14 is in addition complemented by the means 16 for displaying alerts and warning-alert messages meant to inform the pilot of the state of credibility assigned to measurements from sensors, and in particular to warn them when the measurements from one or more sensors are not reliable. These messages may be visual and/or audio signals, for example light signals. Advantageously, these signals are text based or symbol based messages and are included in the device for displaying resident avionics faults.

The aircraft 1 also includes an input interface 17, for example control buttons and a keyboard, thereby enabling the pilot to give instructions to the determination system or to enter numerical values of flight parameters.

Shown in FIG. 3 is an example of the implementation of the method according to an embodiment of the invention, for monitoring the credibility of flight operation and control information and data provided by the sensor probes and measuring apparatus of this aircraft, and in particular the measured values of pressure and incidence.

The method includes a step 21 of determining an initial weight at the ramp m_(p10) of the aircraft 1, in view of determining an estimated weight of the aircraft 1 at any instant in time during its flight.

This initial weight at the ramp m_(pi0) is developed by estimating, according to different methods, multiple weights m_(pi) at the ramp of the aircraft 1 and by determining the initial weight at the ramp m_(pi0) of the aircraft 1 based on the estimates m_(pi) thus obtained.

The step 21 thus advantageously comprises the determination of three ramp weights m_(p1), m_(p2), m_(p3), and the selection as value of the initial weight at ramp m_(pi0) of the median value of the three weights (i₀=1, 2 or 3).

The step 21 comprises a phase 23 of determining the first weight at the ramp m_(p1) of the aircraft 1, at an initial time instant t₁ prior to the take off of the aircraft 1. This ramp weight is determined by estimating and summing up the base weight of the aircraft 1, the fuel weight and the load weight. This weight is generally not accurate. In particular, measurement of the weight of fuel contained in the fuel tanks is not an exact measurement. It is estimated that the error made in this weight m_(p1) is of the order of a few percent.

In addition, the base weight and the load weight are likely to be subject to errors due to the measurement, the transmission of data and information, to the pilot and/or due to data entered into the system.

The step 21 includes a phase 25 of determining the second weight at the ramp m_(p2) of the aircraft 1, carried out during take off, at a chosen time instant t₂, for example 3 seconds after the end of the landing gear shock strut compression signal “Weight off wheels”.

This second ramp weight m_(p2) is determined based on the characteristics of the aircraft at the time instant t₂, in particular the nominal engine thrust at take off under the conditions of calibration, temperature and pressure input by the pilot, and the theoretical drag of the aircraft in the configuration “landing gear down+flaps for take off” in the measured conditions of speed and incidence of the aircraft.

The phase 25 includes the determination of a weight m₂ of the aircraft 1 at the time instant t₂ during take off, to which is added the weight of fuel FU(t₂) consumed since take off. The phase 25 comprises for this purpose the determination of shearing forces F and the drag forces T exerted on the aircraft 1 at this time instant t₂.

The phase 25 includes in particular the measurement of total air temperature TAT by the temperature sensor 5 c and the determination of the static temperature SAT by the computer 3 based on this measurement. It further comprises the measurement of the incidence α by the incidence sensor 5 d, the measurement of static pressure P_(S) by the static pressure sensor 5 a, of the longitudinal acceleration Jx and along the axis Z J_(Z) of the aircraft 1 by the accelerometer 9, and of a speed data value of the aircraft.

This speed data value is advantageously a Mach number independent of the measured pressures and incidence α, denoted by M**. The Mach number M** is determined from the velocity triangle, on the basis of the relationship:

$\begin{matrix} {{M^{**}\left( t_{2} \right)} = \frac{\left. ||{\overset{->}{GS} + {{V_{Z}({GPS})}\overset{->}{k}} - {\overset{->}{W}\left( t_{2} \right)}} \right.||}{\sqrt{\gamma \; {R \cdot {{SAT}\left( t_{2} \right)}}}}} & (7) \end{matrix}$

In which:

-   -   {right arrow over (GS)} and V_(Z)(GPS) are respectively the         horizontal speed of the aircraft 1 relative to the ground and         the speed of the aircraft 1 along the vertical axis B, derived         from the pressure altitude GPS relative to time determined based         on measurements made by the GPS sensor 10 at the time instant         t₂;     -   {right arrow over (k)} is an ascending unit vector parallel to         the vertical axis B;     -   {right arrow over (W)}(t₂) is a wind velocity vector at take off         input by the pilot; and     -   SAT(t₂) is the static temperature at take off.

At this time instant t₂, the wheels of the aircraft 1 are no longer in contact with the ground, in a manner such that the drag force T is determined based on the determined values of the Mach number M** and incidence α.

The drag force T is for example determined based on the equation of propulsion of the aircraft given by:

T=0.7SP _(S) M** ² {tilde over (C)} _(x)(α,M**,conf)  (8)

where {tilde over (C)}_(x) denotes an estimate of the drag coefficient of the aircraft, as a function of the incidence α, the Mach number M** and the flight configuration of the aircraft 1, denoted by “conf”, relating in particular to the extended flaps (here first segment configuration).

The drag coefficient {tilde over (C)}_(x) is estimated for example from a correlation look up table stored in the memory 4 of the computer 3, providing an estimate of the value of {tilde over (C)}_(x) based on the Mach number M** and the incidence α of the aircraft 1. However, the drag coefficient depends weakly on the Mach number, and it may be advantageous, in order to simplify the method, to determine {tilde over (C)}_(x) as a function of the incidence α and the configuration only, or even to fix the {tilde over (C)}_(x) value.

The shearing force F, due to the engines, is a known function of the temperature and pressure.

The weight m₂ of the aircraft 1 at take off is linked to the acceleration J_(X), to the drag T and to the shearing force F by the relationship:

$\begin{matrix} {J_{x} = \frac{F_{X} + T_{X}}{m_{2}}} & (9) \end{matrix}$

wherein F_(X) and T_(X) are projections of the shearing force F and the drag T respectively on the X axis.

The weight m₂ is for example determined based on the acceleration, the drag and the shearing force, by means of a calculation chart established in advance and stored in the memory 4.

The calculation chart is established by determining by weighing in a precise manner the exact weight of the aircraft for a series of test flights, and then measuring for each test flight the corresponding acceleration J_(X), with different configurations of the aircraft. This acceleration is measured with an accelerometer.

The second weight m_(p2) at the ramp is determined based on the weight m₂ at take off and a measurement made by the flow meters of the weight of fuel consumed between the time instants t₁ and t₂. The second weight at the ramp m_(p2) is thus equal to:

m _(p2) =m ₂(t ₂)+FU(t ₂)  (10)

where FU(t₂) denotes the weight of fuel consumed between the time instants t₁ and t₂.

The step 21 further includes a determination phase 26 of determining the third weight at the ramp m_(p3) of the aircraft 1, also carried out during take off.

The determination 26 of the third ramp weight m_(p3) comprises the determination of a weight m₃ of the aircraft 1 at a time instant t₂ during take off, to which is added the weight of fuel FU(t₂) consumed since take off.

The weight m₃ is calculated on the basis of an equation of lift of the aircraft that correlates its effective weight at time instant t₂, the load factor n_(z,), the measured incidence α, the estimated Mach number M**, and the measured static pressure Ps.

The equation of lift of the aircraft is given in a general manner by:

n _(Z) mg=0.7SP _(S) M ² {tilde over (C)} _(Z)(α,M,conf)  (11)

where m is the weight of the aircraft, S represents a reference surface of the aircraft, n_(Z) is the load factor of the aircraft 1 along the axis Z, M is the Mach number of the aircraft and {tilde over (C)}_(Z) is a coefficient of lift of the aircraft 1 along the axis Z.

The phase 26 thus comprises the determination of the load factor n_(z,), the static pressure Ps, the Mach number, and the coefficient of lift of the aircraft 1 at time instant t₂.

The load factor n_(Z) at time instant t₂ is then determined by the computer 3 based on the expression:

$\begin{matrix} {{n_{Z}\left( t_{2} \right)} = \frac{J_{Z}\left( t_{2} \right)}{g}} & (12) \end{matrix}$

where J_(Z) is the acceleration along the axis Z determined by the accelerometer 9 at time instant t₂.

The coefficient of lift {tilde over (C)}_(Z)(t₂) estimated at time instant t₂ is a projection along the axis Z perpendicular to the longitudinal axis of the aircraft 1 of the coefficient of lift C_(z) along an axis orthogonal to the velocity vector of the aircraft 1, and of the drag coefficient C_(x) parallel to this velocity vector. The coefficient of lift {tilde over (C)}_(Z) therefore satisfies: {tilde over (C)}_(Z)=C_(x) sin α+C_(z) cos α. In general it mainly comprises a lift term.

The coefficient of lift {tilde over (C)}_(Z) is a function of the incidence α, the Mach number M and the flight configuration of the aircraft 1, relative in particular to the extended flaps. At the time instant t₂ considered, it is the first segment configuration (landing gear down and flap setting selected for take off).

The coefficient of lift {tilde over (C)}_(Z) is estimated for example based on a correlation look up table stored in the memory 4 of the computer 3, providing an estimate of the value of {tilde over (C)}_(Z) based on the Mach number and the incidence of the aircraft 1.

This correlation look up table is determined in advance by performing a series of test flights for a given model of aircraft. Various different configurations of incidence, of weight factor, load and Mach, and various different configurations of aircraft are scanned in order to determine in each case the {tilde over (C)}_(Z) coefficient.

The coefficient of lift is thus estimated by means of using the correlation look up table based on the Mach number M**(t₂) determined at the time instant t₂ and an incidence value α(t₂) measured by the incidence sensor at this time instant t₂, in the first segment configuration. It is thus denoted as {tilde over (C)}_(Z)**(t₂):{tilde over (C)}_(Z)**(t₂)={tilde over (C)}_(Z)(α(t₂), M**(t₂),1^(st) segment).

The weight m₃ of the aircraft 1 at time instant t₂ is thus deduced from the equation of lift and in accordance with the expression:

$\begin{matrix} {{m_{3}\left( t_{2} \right)} = \frac{0.7{SP}_{S}{M^{**2}\left( t_{2} \right)}{{\overset{\sim}{C}}_{Z}^{**}\left( t_{2} \right)}}{{n_{Z}\left( t_{2} \right)}g}} & (13) \end{matrix}$

The weight at the ramp m_(p3) is derived by adding the weight of fuel consumed FU(t₂) between the time instant t₁ and the time instant t₂, determined from the measurements of flow meters.

m _(p3) =m ₃(t ₂)+FU(t ₂)  (14)

The three ramp weights m_(p1), m_(p2) and m_(p3) thus determined are generally different. The step 21 thus includes a phase 27 of determining a value of the initial weight at the ramp of the aircraft 1, denoted by m_(pi0), based on the three ramp weights m_(p1), m_(p2) and m_(p3) determined in advance. This weight at the ramp m_(pi0) is advantageously equal to the median of the weights m_(p1), m_(p2) and m_(p3).

Thus, if the value of one of these weights is an outlier, this outlier is excluded and does not feature in the value of the ramp weight m_(pi0).

During the flight of the aircraft 1, the flight parameters are determined. These parameters include the characteristics of the ambient air and of the flight of the aircraft 1, and are determined in a continuous or periodic manner at time instant t_(v) of the flight, during a step 28.

This step 28 includes a determination phase 29 of determining the characteristics of the ambient air, in particular the static pressure P_(S), and the static temperature SAT and the total temperature TAT.

The step 28 also includes a determination phase 31 of determining the flight characteristics of the aircraft 1, and in particular its incidence α by the incidence sensor 5 d, the altitude pressure Z_(P) by the altimeter 6, the Mach number M_(a) by the Mach indicator 8 and the acceleration J by the accelerometer 9, at the time instant t_(v) considered. The Mach number M_(a) constitutes a second speed data value, in addition to the speed equivalent EV.

The step 28 further includes a determination phase 33 of determining the coefficient of lift {tilde over (C)}_(Z) and the load factor n_(Z) of the aircraft 1 along the axis Z based on the values of the Mach number M_(a), incidence α and acceleration J determined during the phase 31.

As previously described here above, the load factor n_(Z) is determined from the expression:

$\begin{matrix} {n_{Z} = \frac{J_{Z}}{g}} & (15) \end{matrix}$

where J_(Z) is the acceleration along the axis Z determined during the phase 31.

Furthermore, the coefficient of lift {tilde over (C)}_(Z) is estimated based on the correlation look up table stored in the memory 4 of the computer 3, which provides an estimate of the value of {tilde over (C)}_(Z) based on the values of the Mach number M_(a) and the incidence α during the phase 31.

In addition the step 28 includes a determination phase 39 of determining an estimated weight {tilde over (m)} of the aircraft 1 during its flight.

The determination 39 of the estimated weight {tilde over (m)} includes a determination phase 41 of determining a fourth ramp weight of the aircraft 1, during the flight of the aircraft 1, based on the equation of lift of the aircraft. This fourth weight is thus known as lift weight m_(sp). This lift weight is determined by estimating the instantaneous weight of the aircraft 1 at multiple distinct time instants t during the flight, advantageously in a continuous manner, by deducing from each of the instantaneous weights thus assessed a ramp weight of the aircraft 1, and by establishing a weighted average of these ramp weights.

The instantaneous weight of the aircraft 1 at each time instant t, denoted by m₄(t), is derived from the equation of lift based on the static pressure P_(S) measured during the phase 29, the Mach number M_(a) determined during the phase 31, and the coefficient of lift {tilde over (C)}_(Z), and the load factor n_(Z) determined during the phase 33, in accordance with the expression:

$\begin{matrix} {{m_{4}(t)} = \frac{0.7\; {SP}_{S}M_{a}^{2}{{\overset{\sim}{C}}_{Z}\left( {\alpha,M_{a},{conf}} \right)}}{n_{Z}g}} & (16) \end{matrix}$

A weight at ramp m₄′ is derived by adding the weight of fuel consumed FU(t) between time instant t₁ and time instant t, determined from measurements made by flow meters.

However, this value of ramp weight m₄′ depends on measurements that could be erroneous, in particular in the case of turbulence, or failures of measuring instruments.

Thus during the phase 41 the lift weight m_(sp) is determined as a weighted average of the ramp weights m₄′ determined between the time instant t₂ at take off and the time instant t_(v), where this average is computed only over the time instants t during which the measurements are considered to be reliable. The lift weight m_(sp) is thus determined at a time instant t_(v) in accordance with the expression:

$\begin{matrix} {{m_{sp}\left( t_{V} \right)} = \frac{\int\limits_{t_{2}}^{t_{V}}{{\chi_{m}(t)}\left( {{m_{4}(t)} + {{FU}(t)}} \right)}}{\int\limits_{t_{2}}^{t_{V}}{\chi_{m}(t)}}} & (17) \end{matrix}$

here χ_(m)(t) denotes a characteristic function of weight taking the value 1 or 0 according to independent geometric and dynamic criteria aimed at characterising the horizontal rectilinear (straight) flight of the aircraft 1.

The value of the function χ_(m)(t) at each time instant t is determined by the computer 3. In particular, when the aircraft 1 is in a stable and calm flight phase, that is to say, when the vertical velocity V_(Z)(GPS) derived from the GPS sensor 10 is lower than a predetermined threshold, the absolute value of the inclination (derived from the inertial navigation unit) is less than 5^(°), the load factor n_(z) is close to 1 and an energy of the load factor, defined as its variance is close to zero, χ_(m)(t) takes the value 1. In contrast, when the flight is turbulent or not stabilised in a straight line, or when the computer 3 detects a failure of a sensor or measuring instrument, as described here below, it sets the value χ_(m)(t)=0.

The lift weight m_(sp) therefore does not have a fixed value, but is adjusted during the flight.

The estimated weight {tilde over (m)} of the aircraft 1 is then determined during a step 43 based on the values of weight at ramp m_(pi0) and m_(sp). The estimated weight {tilde over (m)} is thus of the type {tilde over (m)}=f(m_(pi0), m_(sp)).

The estimated weight {tilde over (m)} is for example a weighted sum of the median weight m_(pi0) determined in the step 21 and the lift weight m_(sp). The weighting coefficients are calculated for example from the function χ_(m)(t), in a manner such that the coefficient attributed to the lift weight is proportional to the fraction of time during which it was possible for this weight to be determined.

The estimated weight {tilde over (m)} is in this example given by:

{tilde over (m)}(t _(v))=[(1−p(t _(v)))m _(pi0) +p(t _(v))m _(sp)(t _(v))]−FU(t _(v))  (18)

where the function p(t_(v)) is defined by:

$\begin{matrix} {{p\left( t_{V} \right)} = \frac{\int\limits_{t_{1}}^{t_{V}}{\chi_{m}(t)}}{t_{V} - t_{1}}} & (19) \end{matrix}$

Thus, when the flight is stabilised for a long time p(t_(v)) tends towards 1 and the estimated weight {tilde over (m)} tends towards the lift weight m_(sp) from which the weight of fuel consumed was subtracted.

Knowledge of the pressure altitude of the aircraft (or of the static pressure surrounding the aircraft) is of paramount importance in any method for analytical monitoring of flight parameters, aiming in particular at detecting possible corruption of the values of static pressure and total pressure measured. Thus, according to the invention, an altitude data value derived from a geographical position sensor is available on a continuous and ongoing basis during the flight of the aircraft 1. This altitude data value is advantageously derived from the GPS sensor 10, the altitude being expressed in a conventional manner above the reference geoid WGS 84.

The phase 47 thus includes the determination of an altitude measured by the GPS and denoted by Z_(GPS), of a pressure altitude estimator, also known as reconstituted pressure altitude and denoted by Z_(P)**, and a reconstituted static pressure denoted by P_(S)**, determined from the reconstituted pressure altitude Z_(P)** by means of a standard atmosphere table.

Two modes are to be distinguished. According to a first mode, known as the primary mode, the reconstituted pressure altitude Z_(P)** is determined by subtracting from the GPS altitude Z_(GPS) an altitude correction term in order to take into account the difference between the standard atmosphere and the actual flight atmosphere. This difference may be due to a pressure at the lower ground level, respectively greater than the standard pressure of 1013 bar, generating an offset of the downward isobaric curves, respectively upwards, and to a non standard temperature gradient between the ground and the aircraft, changing the spacing of the isobars.

This difference is determined at constant intervals DT, for example equal to 30 seconds, by comparison between the reconstituted pressure altitude Z_(P)** and the pressure altitude Z_(P) derived from the altimeter 6. These differences constitute a sequence of values ΔZ(j), where j is a natural number. Successive time instants of measurement of these differences will be denoted by t(j). Thus:

ΔZ(j)=Z _(GPS)(t(j))−Z _(p)(t(j))

The altitude correction term is calculated from the differences ΔZ(i) as a sequence ΔZ**(j) given by the formula ΔZ**(j)=ΔZ(i), where i is an index less than or equal to j, selected according to the following algorithm:

-   -   If no inconsistency in air data, clino-barometric parameters         have been declared, that is to say, if the measurements made by         the static pressure sensor 5 a, total pressure sensor 5 b and         incidence sensor 5 d have not been deemed to be unreliable, and         if ΔZ(j)ε[ΔZ(j−1)−ST; ΔZ(j−1)+ST] the index i is equal to the         index j, that is to say Δ**Z(j)=ΔZ(j). Δ**Z is therefore thus         automatically reset.     -   ST is a tolerance threshold. The verification of the inclusion         of ΔZ(j) in the interval [ΔZ(j−1)−ST; ΔZ(j−1)+ST] amounts to         analytically analysing the jumps of ΔZ(j) in a manner so as to         disallow an aberrant reset in case of corruption of the pressure         altitude Z_(p)(t(j)). The tolerance threshold ST can for example         take the value of 100 ft+5% |Vz|. The first term of 100 feet is         intended to cover an exceptional altitude isobaric gradient         (generator of geostrophic wind) as well as the statistical         fluctuation of the altitude value derived from the GPS; the         second term equal to 5 percent of the vertical velocity         V_(Z)(GPS) is intended to cover, in case of change in altitude,         a temperature difference of not more than the standard 30° C. in         absolute value. ST may be advantageously adapted following the         analysis of flight test results. By way of example, a         geostrophic wind of 200 knots at the pole corresponds to an         isobaric gradient of 40 feet in 30 seconds of flight.     -   If no inconsistency in air data, clino-barometric parameters         have been declared, and if ΔZ(j)         [ΔZ(j−1)−ST; ΔZ(j−1)+ST], the value of the index i remains equal         to its previous value, and Δ**Z is not reset. In addition, the         process of resetting of the sequence of altitude deviations         ΔZ**(j) to the sequence ΔZ is stopped until an eventual         reset-restart by the pilot as will be described farther below.     -   When on the contrary the air data, clino-barometric parameters         determined from the static pressure sensor 5 a, and total         pressure sensor 5 b incidence sensor 5 d are considered to be         inconsistent and therefore unreliable, as described here below,         the process of resetting of the sequence of altitude deviations         ΔZ**(j) to the sequence ΔZ is stopped. Thus, the value i is         fixed at the last “relevant” index, that is to say corresponding         to a past time instant of the flight for which the inconsistency         was not yet manifested. Thus, i<j. Thus the process of resetting         of the sequence of altitude deviations ΔZ**(j) to the sequence         ΔZ is stopped until the eventual reset-restart by the pilot.     -   Moreover, the pilot has available a reset command dedicated to         the manual resetting of ΔZ**. Thus, when i≠j due to an         inconsistency of air data, clino-barometric parameters or a         pressure altitude improbability, the pilot can, based on         external information which may be available to them, activate         this command in order to, on the one hand force the jumping of         the index j, which resynchronises the beats of DT at the instant         of pressing the button, on the other hand in order to restart         the periodic resetting of i to j, unless an inconsistency of         clino-barometric, air data parameters is once again detected or         an aberrant resetting occurs again. This reset command is for         example a push button located on the auxiliary display device         14. In particular, it makes it possible to force the resetting         of ΔZ** to a measured value of Z_(GPS)−Z_(P) at the moment of         actuation of the command.

The reconstituted pressure altitude Z_(P)** is thus determined at each time instant t based on the expression:

Z _(P)**(t)=Z _(GPS)(t)−ΔZ**(j)  (20)

where j is the index corresponding to the time beat immediately preceding t, such that t(j)≦t≦t(j+1).

Thus, each time that the index i is aligned with the index j (whether it is an automatic or manual resetting), at time instant t=t (j), one gets:

$\begin{matrix} {{Z_{P}^{**}\left( {t(j)} \right)} = {{Z_{GPS}\left( {t(j)} \right)} - {\Delta \; {Z^{**}(j)}}}} \\ {= {{Z_{GPS}\left( {t(j)} \right)} - \left\lbrack {{Z_{GPS}\left( {t(j)} \right)} - {Z_{P}\left( {t(j)} \right)}} \right\rbrack}} \\ {= {Z_{P}\left( {t(j)} \right)}} \end{matrix},$

Thus, as long as the sensor measurements are considered to be reliable and in the absence of corruption of the pressure altitude, or when the pilot activates the reset-restart command, the reconstituted pressure altitude Z_(P)** is indeed reset to that of the pressure altitude Z_(P). It is therefore a “loose” hybridisation in the sense that the typical time interval between two resets is DT (30 seconds in the example chosen).

The pressure altitude estimator Z_(P)** therefore enables the possibility of providing in a continuous ongoing manner an estimated value of the static pressure surrounding the aircraft (via a standard atmosphere table), while being protected against sudden corruption of the static pressure probe 5 a: for example, a freezing of the static pressure is detected very rapidly after setting the aircraft controls to begin climbing or descending, through the exceeding of the tolerance threshold ST and the rapid divergence between the altitudes Z_(P)** and Z_(P).

Moreover, when an inconsistency between the air data, clino-barometric parameters derived from the sensors is detected, stopping of the automatic resetting ensures that the doubtful static pressure and total pressure values are no longer taken into account; indeed, the malfunctioning of pressure sensors, whether for static or total pressure, has a direct impact on the reliability of the pressure altitude computed by the computer 3.

The pressure altitude derived from the GPS sensor is displayed by the auxiliary display device 14 when the static and total pressure values are considered to be unreliable. The pilot can then choose to display either the altitude above the reference geoid Z_(GPS) (it then involves a “GEO” setting of altitude above the reference geoid) or the reconstituted pressure altitude Z_(P)** (it then involves a “Standard” setting of altitude).

Stopping the automatic resetting of ΔZ** on account of at least one of the two stop conditions described here above could be detrimental, in the long term, to the accuracy of the reconstituted pressure altitude Z_(P)**. The reset command provides the possibility of avoiding such inaccuracy and restarting the automatic resetting, when the pilot has available information that allows them to authenticate the validity of the static pressure measurements.

However, if no information available on board serves to authenticate the validity of these static pressure measurements, the GPS altitude of the aircraft 1 above the geoid and the static pressure surrounding the aircraft 1 are evaluated in accordance with a secondary mode, based on the local QNH (Queen's Nautical Height). QNH is an international code that is used for the setting of the altimeter such that it indicates the topographic elevation of the land area where the QNH is deduced when the aircraft is located on the ground in this land area.

The local QNH, obtained on an ad hoc basis through meteorological forecasting, or by way of radio communication or datalink means, is then inserted into the secondary mode by the pilot, and the computer 3 extracts the theoretical static pressure P_(st) from a standard atmosphere table, corresponding to a pressure altitude situated at an altitude Z_(GPS) above the isobar of the QNH.

In this secondary mode, the reconstituted static pressure P_(S)** is equal to the theoretical static pressure P_(st). It should be noted that the closer that the plane flies to the ground surface or the sea surface, the better will be this estimate of the static pressure.

Advantageously, entry into this secondary mode for reconstitution of the static pressure can be done by pressing on the same command as the ΔZ** reset command in the primary mode. The duplexing of this command may be carried out implicitly by the display of an altimeter setting by the pilot on the auxiliary display device 14: if the requested setting is “standard”, the actuation of the reset command will restart the process of automatic resetting in accordance with the primary mode; if it is a manual type setting (QNH displayed), typically below the transition surface, the reset command will activate the secondary mode for reconstitution of the static pressure.

The first auxiliary speed of the aircraft 1 determined during the phase 49 is independent of the static pressure P_(S) derived from the static pressure sensor 5 a. It is advantageously extrapolated in real time from the current value of the measured incidence. This speed is for example a Mach number, known as high Mach and denoted by M_(n)*.

This Mach number is determined periodically from the equation of lift, in the form of a recursive series, in accordance with the relationship:

$\begin{matrix} {M_{n}^{*} = \left( \frac{0.7\; {S \cdot P_{S}^{**} \cdot {{\overset{\sim}{C}}_{Z}^{*}\left( t_{V} \right)}}}{n_{Z}\overset{\sim}{m}g} \right)^{\frac{1}{2}}} & (21) \end{matrix}$

where:

-   -   N is a time index corresponding to a time instant t_(v),     -   P_(S)** is the reconstituted static pressure determined during         the phase 47 at time instant t_(v),     -   n_(z) is the load factor determined during the phase 33 at time         instant t_(v),     -   {tilde over (m)} is the weight estimated during the phase 39 at         time instant t_(v), and     -   {tilde over (C)}_(Z)*(t_(v))={tilde over (C)}_(Z)(α(t_(v)),         M_(n−1)*, conf) is a coefficient of lift is estimated at time         instant t_(v)

The estimated coefficient of lift {tilde over (C)}_(Z)*(t_(v)) is determined from a correlation lookup table, providing the value of {tilde over (C)}_(Z)*(t_(v)) based on the value of the incidence α at time instant t, determined during the phase 31, and on the last high Mach determined, that is to say the high Mach M_(n−1)* with index n−1.

This estimated coefficient of lift {tilde over (C)}_(Z)*(t_(v)) thus differs from the coefficient of lift {tilde over (C)}_(Z) determined during the phase 33 in that it does not involve the Mach number derived from the Mach indicator 8 based on the static pressure measured by the static pressure sensor 5 a and the total pressure measured by the total pressure sensor 5 b. The high Mach M_(n)* therefore does not depend on the pressures measured at time instant t_(v).

The series M_(n)* is initialised based on a first term M₁*. This first term is a reliable initial value, derived from independent measurements made by the pressure sensors.

The frequency for determination of the high Mach is for example comprised between 1 Hz and 10 Hz, preferably 4 Hz.

However, the high Mach depends on the incidence α. In case of a detected failure of the incidence sensor 5 d, this speed M_(n)* is no longer calculated.

The Vhigh Mach M_(n)* thus calculated may be used to derive an estimate of static temperature SAT_(n)* independently of the pressure measurements originating from the sensors 5 a or 5 b, a standard temperature deviation estimator ΔISA_(n)*, estimating the variation in temperature SAT_(n)* relative to the static temperature SAT_(std) expected at the reconstituted pressure altitude Z_(P)** of the aircraft, and an estimate of the horizontal wind speed.

The static temperature SAT_(n)* is obtained during the phase 50 based on the total temperature TAT derived from the sensor 5 c, supposed to be reliable, and the strong Mach M_(n)*, by replacing the Mach number M in equation (1) by the high Mach M_(n)* in accordance with the following expression:

$\begin{matrix} {{SAT}_{n}^{*} = {\frac{{TAT}\left( t_{V} \right)}{\left( {1 + {\frac{\gamma - 1}{2}M_{n}^{*2}}} \right)} \approx \frac{{TAT}\left( t_{V} \right)}{\left( {1 + {0.2\; M_{n}^{*2}}} \right)}}} & (22) \end{matrix}$

The standard temperature deviation estimator ΔISA_(n)*, estimating the variation in temperature SAT_(n)* relative to the static temperature SAT_(std) expected at the reconstituted GPS pressure altitude Z_(P)** of the aircraft, is determined by the expression:

ΔISA _(n)*=SAT_(std)−SAT_(n)*  (23)

the temperature SAT_(std) being for example determined from a standard atmosphere table. This standard temperature deviation estimator is not used as long as the incidence measured by the incidence sensor 5 d is considered to be reliable and the Vhigh Mach can be calculated. However, it provides the ability, when this incidence is no longer considered to be reliable, to estimate a static temperature by correcting a static temperature SAT_(std) obtained from the GPS altitude pressure Z_(P)**, as described here below.

The horizontal wind speed relative to the ground is determined during the phase 51 by means of a horizontal wind estimator {right arrow over (W_(n)*)} that periodically assesses wind speed in terms of strength and direction. This wind estimator is advantageously determined from the velocity triangle according to which the speed {right arrow over (V_(S))} of the aircraft relative to the ground, in a horizontal plane, is the sum of its air speed {right arrow over (V_(P))} and the speed of the wind, which is:

{right arrow over (W _(n*))}={right arrow over (V _(S))}−{right arrow over (V _(P))}  (24)

The horizontal speed {right arrow over (V_(S))} of the aircraft relative to the ground, that is to say, its speed in a plane horizontal to the ground, is estimated from measurements made by the GPS sensor 10 for example. Thus {right arrow over (V_(S))}=={right arrow over (GS)}.

The air speed {right arrow over (V_(P))} of the aircraft is the horizontal component of its speed relative to the air, that is to say, the horizontal component of its true air speed.

A true air speed of the aircraft, known as high true air speed and denoted by TAS_(n)*, is determined from the high/high Mach M_(n)*, according to a relationship that is analogous to the relationship (5):

TAS_(n) *=M _(n)*√{square root over (γR·SAT_(n)*)}  (25)

Neglecting the vertical component of the wind speed, the speed of the aircraft 1 along the vertical axis B relative to the ground is equal to its vertical speed with relative to the air.

Thus, a standard value of the air speed, known as high air speed and denoted by V_(p)*, is determined from the high true air speed in accordance with the relationship:

TAS_(n)*² =V _(p)*² +V _(z)(GPS)²  (26)

where V_(Z)(GPS) is the speed of the aircraft 1 along the vertical axis B relative to the ground, as determined from measurements made by the GPS sensor 10 for example.

The air speed {right arrow over (V_(p)*)} of the aircraft is therefore estimated by:

{right arrow over (V _(p)*)}={right arrow over (u _(h))}√{square root over (TAS_(n)*² −V _(z)(GPS)²)}  (27)

wherein the vector {right arrow over (u_(h))} is a horizontal unit vector bearing the horizontal projection of the velocity vector relative to the air, estimated by means of the incidence α.

Based on the assumption according to which the side slip (i.e., the angle between the relative wind and the aircraft heading) is zero and the incidence α of the aircraft given by the incidence sensor 5 d is reliable, the horizontal wind estimator {right arrow over (W_(n)*)} is thus determined from the expression:

{right arrow over (W _(n)*)}={right arrow over (GS)}−{right arrow over (u _(h))}√{square root over (M _(n)*²·(γRSAT_(n) *−V _(Z)(GPS)²)}  (28)

During the flight of the aircraft 1, the computer 3 implements several tests that provide the ability to determine a status of credibility of the values of flight parameters determined by means of sensor measurements. In particular, these tests are used to determine the consistency of the data and information relating to speed, pressure and incidence, such as the Mach number M_(a), the static pressure Ps and the incidence α.

The method thus comprises a step 70 of determination of a state of credibility of the information and data values relating to static pressure, total pressure and incidence, by means of a first test. This test 70 is an analytical surveillance test, implemented continuously during the flight, until a malfunction has been detected.

The test 70 is based on the equation of lift. It is carried out by determining whether the flight parameters measured actually satisfy this equation of lift. This equation in fact brings to bear the static pressure Ps, the Mach number M_(a) and the incidence α, via the coefficient of lift at the aircraft axes {tilde over (C)}_(Z).

The test 70 comprises a phase 72 of determination of the quantity:

$\begin{matrix} {{T_{1}\left( t_{V}^{k} \right)} = \frac{{n_{Z}\left( {t_{V} + \varphi} \right)}{\overset{\sim}{m}\left( t_{V} \right)}g}{0,{7{{SP}_{S}\left( t_{V} \right)}{M_{a}^{2}\left( t_{V} \right)}{{\overset{\sim}{C}}_{Z}\left( {{\alpha \left( t_{V} \right)},{M_{a}\left( t_{V} \right)},{conf}} \right)}}}} & (29) \end{matrix}$

in which the parameters, {tilde over (m)}, P_(S), M_(a), {tilde over (C)}_(Z) are those determined during the step 28 at a time instant t_(v) immediately prior to the time instant t_(v) ^(k) of determination 72. The index k indicates that it is the k^(−th) test 70 being implemented by the computer 3. n_(Z) is determined at a time instant (t_(v)+φ) where φ is a time offset determined once and for all in all or part of the flight envelope, in order to statistically maximise a correlation between the incidence α(t_(v)) and the load factor n_(Z)(t_(v)+φ) on the aircraft considered, as described subsequently.

The equation of lift holds if T₁=1 in the absence of any error in the measurements and in the variance distribution {tilde over (C)}_(Z). Thus, if the values of the static pressure P_(S), the Mach number M_(a) and the incidence α derived from measurements made by sensors are correct and if the variance distribution {tilde over (C)}_(Z) is correct, the quantity T₁ must be equal to 1. A slight deviation from this value may nevertheless still be tolerated, particularly because of the noise of the measurements, the deviation of the estimated weight {tilde over (m)} relative to the actual weight of the aircraft, and the potential inaccuracy of the value of the coefficient of lift {tilde over (C)}_(Z).

The test 70 thus includes a step 73 in which the computer 3 verifies the inclusion of the value T₁ in a limited interval around the value 1, denoted by ]1−ε₁;1+ε₁[. ε₁ is a predetermined number defining the permissible deviation, for example 0.1, corresponding to a 10% error.

If T₁ε]1=ε₁;1+ε₁[, the first test 70 is positive, and the data values for speed, pressure and incidence are considered to be of optimal credibility 74.

In the state of optimal credibility 74, the flight parameters used directly or indirectly for the operation and control of the aircraft thus are:

pressure altitude Z_(P);

static temperature SAT;

the Mach number M_(a);

the true air speed TAS;

the indicated air speed IAS.

The true air speed of the aircraft is determined from the Mach number M_(a) in accordance with the relationship:

TAS=M_(a)√{square root over (εR·SAT)}  (30)

The indicated air speed of the aircraft, denoted by IAS for “Indicated Air Speed” is the speed directly derived from the pressure measurements, translated by the anemometer 7.

During a long phase of stabilised flight, the function p(t) converges to the value 1, so that the estimated weight {tilde over (m)}(t) converges to the weight m_(sp)(t)−FU(t), which itself converges to the weight m₄(t) derived from the equation of lift. Thus, the quantity T₁(t_(v) ^(k)) naturally converges to the value 1 during a flight stabilised in cruise phase. This is obtained even if the variance distribution {tilde over (C)}_(Z) has a bias or if the measurement of incidence sensor is biased.

In the state of optimal credibility 74, the auxiliary display device 14 displays a set of flight characteristics derived from measurements made by sensors of the aircraft 1, determined in particular from the static pressure, total pressure and the incidence measured. For example, the auxiliary display device 14 displays the pressure altitude Z_(P), the Mach number M_(a) and the indicated air speed IAS. The auxiliary display device 14 also displays the flight path angle γ_(air) and the incidence α measured.

The auxiliary display device 14 further displays indicated stall speed of the aircraft 1, denoted by IAS_(s), on the basis of the current load factor n_(z). It is therefore the minimum IAS speed that can be reached by the aircraft 1 without stalling at the value of the current load factor.

This stall speed IAS_(s) is determined by the computer 3 as a function of the current incidence α_(s) of stall, the indicated air speed IAS and incidence α, in accordance with the equation:

$\begin{matrix} {{IAS}_{s} = {{IAS}\sqrt{\frac{\alpha - \alpha_{0}}{\alpha_{s} - \alpha}}}} & (31) \end{matrix}$

where α₀ is the incidence of zero lift in the current configuration of the aircraft. It is generally negative, its absolute value may go up a few degrees to the highest flap setting. This incidence α₀ is tabulated depending on the configuration of the aircraft.

If on the contrary T₁

]1−ε₁;1+ε₁[, T₁ corresponding to a time instant t_(v) ^(k1), the test 70 is negative, which signifies that at least one of the data values of static pressure, total pressure, or incidence is wrong. The computer 3 then considers that the measurements of speed, barometric altitude and incidence are no longer reliable, and activates in a transition step 75 a state of low credibility 76.

As long as this state of low credibility 76 is activated, the flight parameters determined by the computer 3 at a time instant t_(v) and intended to aid in flight operation and control are independent of the values for static pressure, total pressure and incidence derived from the sensors at this time instant t_(v,), even if they may depend on previous values measured in the state of optimal credibility.

During the transition step 75, the computer 3 freezes the values of the standard temperature deviation ΔISA_(n)* and the pressure altitude offset ΔZ**(j) at the last known reliable values. The last known reliable values are those determined some time prior to the previous test 70, at a time instant denoted by t_(f): t_(f) is the most recent time instant at which the flight parameters were considered to be reliable. For example t_(f)=t_(v) ^(k1)−30 s would be chosen.

In particular, the total temperature measurement TAT made by the total temperature sensor 5 c is considered to be unreliable, such that the resetting of the standard temperature deviation ΔISA_(n)* based on the relationships (23) and (24) cannot be performed. The standard temperature deviation ΔISA_(n)* thus takes the constant value ΔISA_(tf)**=ΔISA_(n)*(t_(f)).

The static temperature is then estimated from the reconstituted pressure altitude Z_(P)** in accordance with the relationship:

SAT**=SAT_(std)(Z _(p)**)+ΔISA_(tf)**  (32)

SAT** is known as low static temperature.

As for the static temperature SAT_(n)*, it is no longer determined.

The pressure altitude offset ΔZ**(j), used for the determination 47 of the reconstituted pressure altitude Z_(P)**, moreover also takes the constant value ΔZ_(tf)**=ΔZ**(t_(f)) (the value of i is frozen as described here above).

However, as previously described above, this value ΔZ_(tf)** may be modified at any time by manual action performed by the pilot in activating the reset command, for example, at low altitude before landing if the pilot verifies that their pneumatic altitude indicated at the QNH setting is consistent with their geoid altitude given by a standby backup instrument or their radiosonde unit height increased by the terrain elevation.

Furthermore, the incidence value is not reliable, such that the wind estimator can no longer be determined according to the equation (29) given here above. This estimator thus denoted by {right arrow over (W**)}, then takes a constant value {right arrow over (W_(tf)**)}={right arrow over (W_(n)*)}(t_(f)). However, the value of the wind estimator may be updated occasionally, in an automatic manner, when the trajectory of the aircraft undergoes sufficient change, according to a criterion described here after.

The updating or resetting of the low credibility horizontal wind estimator {right arrow over (W**)} is performed according to a method similar to the method for determining the high credibility horizontal wind estimator {right arrow over (W_(n)*)}, by replacing the incidence α measured by the incidence sensor with a reconstituted incidence denoted by α_(R), and replacing the high true air speed TAS_(n)* with an estimated true air speed denoted by TÃS.

Evaluation of the reconstituted incidence α_(R) is performed based on the equation of lift of the aircraft, by remaining within a flight envelope in which the coefficient of lift of the aircraft can be expressed as a linear function of the incidence α_(R), whose coefficients are predetermined in accordance with the expression:

{tilde over (C)} _(Z)*(α_(R) ,M)=λ(M)+μ(M)·α_(R)  (33)

valid within a limited incidence range [α₀(M), α₁(M)].

Thus, the reconstituted incidence is given by:

$\begin{matrix} {\alpha_{R} = {\frac{{\overset{\sim}{C}}_{Z} - {\lambda (M)}}{\mu (M)} = {\frac{n_{Z}\overset{\sim}{m}g}{0.7{SP}_{S}^{**}M^{**2}{\mu (M)}} - \frac{\lambda (M)}{\mu (M)}}}} & (34) \end{matrix}$

In similar fashion, the derivative of the reconstituted incidence α_(R) is expressed as a function of the derivative of the load factor n_(Z), by:

$\begin{matrix} {{\overset{.}{\alpha}}_{R} = {\frac{\overset{\sim}{m}g}{0.7{SP}_{S}^{**}M^{**2}{\mu (M)}}{\overset{.}{n}}_{Z}}} & (35) \end{matrix}$

The values of π(M) and μ(M) are determined from tables giving the value of the coefficient of lift as a function of the incidence and the Mach number.

The estimated true air speed TÃS is then estimated as a quotient between an acceleration of the aircraft and an angular speed of this aircraft, on the basis of the reconstituted incidence α_(R) and its derivative. This estimate is valid provided that the change in flight path trajectory of the aircraft is sufficiently well defined, according to the criteria described here below, and assuming that the side slip is zero.

The criterion used to assess whether the change in flight path trajectory is sufficient is based on the following formula which expresses, by way of the fundamental relationship of the dynamic, that the projection of the acceleration of the airplane in the terrestrial reference frame, projected in the plane of the aircraft, is greater than a determined value, advantageously 0.4g:

∥g{right arrow over (n)}+{right arrow over (g)}∥>0.40g  (36)

where {right arrow over (n)} is the load factor and g {right arrow over (n)}+{right arrow over (g)} the acceleration of the aircraft.

Thus, the change in the trajectory of the aircraft is considered adequate if:

(cos θ sin φ₁)²+(n _(Z)−cos φ₁ cos θ)²>0.16  (37)

where θ denotes the pitch angle of the aircraft and φ₁ the angle of heel thereof.

It should be noted in particular that it suffices to have (cos θ sin φ₁)²>0.16, therefore to sufficiently tilt the airplane (whatever be the thrust, the drag and the lift) in order to obtain a “sufficient” change in flight path trajectory.

Typically, when the aircraft 1 in terms of trajectory is close to the straight line flight path, the calculation of the estimated true air speed will be declared invalid and the horizontal wind estimator {right arrow over (W**)} will not be updated.

Conversely, when the change in the flight path trajectory is considered sufficient, the estimated true air speed TÃS is estimated, which allows for resetting the horizontal wind estimator in {right arrow over (W**)} accordance with the expression:

{right arrow over (W**)}={right arrow over (GS)}−{right arrow over (v)} _(h)√{square root over (TÃS² −V _(Z)(GPS)²)}  (38)

where {right arrow over (v_(h))} is a horizontal unit vector bearing the horizontal projection of the air speed vector estimated by means of the reconstituted incidence α_(R).

During the transition step 75, the computer 3 moreover also fixes χ_(m)(t)=0, such that the values of static pressure, Mach and incidence are no longer used to calculate the estimated weight. Thus, the estimated weight {tilde over (m)} at a time instant t_(v)>t_(f) is given by:

{tilde over (m)}(t _(v))={tilde over (m)}(t _(f))−FU[t_(f) ;t _(v)]  (39)

where FU[t_(f); t_(v)] denotes the weight of fuel consumed between t_(f) and t_(v).

Estimation of the horizontal wind speed and standard temperature deviation provides the ability, in addition to the reconstituted pressure altitude Z_(P)**, to calculate estimates of speed of the aircraft 1 based on its speed {right arrow over (GS)} relative to the ground. These estimates are for example an estimate of the Mach number of the aircraft, known as low Mach and denoted by M**, and an estimate of a speed equivalent, known as low speed equivalent and denoted by EV**.

The speed {right arrow over (GS)} of the aircraft 1 relative to the ground is determined for example by the computer 3 from the GPS sensor 10. It can also be determined from the acceleration of the aircraft as measured by the inertial systems IRS (Inertial Reference System) of the aircraft 1, optionally eventually hybridising the information and data values received from the GPS sensor and inertial systems.

The speed {right arrow over (GS)} of the aircraft 1 and the estimate of the horizontal wind {right arrow over (W**)} speed, equal to the frozen value {right arrow over (W_(tf)**)} or to a reset value, may be used to determine an air speed vector of the aircraft, known as low air speed and denoted by {right arrow over (V_(P)**)} and given by:

{right arrow over (V _(P)**)}={right arrow over (GS)}−{right arrow over (W**)}  (40)

The vertical speed V_(Z)(GPS) of the aircraft 1 along the vertical axis B relative to air is determined from measurements made by the GPS sensor 10, and overlooking the vertical wind.

A true air speed of the aircraft, known as low true air speed and denoted by TAS**, is then determined as a standard of the velocity vector of the aircraft relative to the air, the sum of the air speed and the vertical speed in accordance with the relationship:

TAS**(t)=∥{right arrow over (GS)}+V _(Z)(GPS){right arrow over (k)}−{right arrow over (W**)}  (41)

in which:

{right arrow over (GS)} is the horizontal speed of the aircraft 1 relative to the ground at the time instant t;

V_(Z)(GPS) denotes the speed of the aircraft 1 along the vertical axis B at the time instant t;

{right arrow over (k)} is an ascending unit vector parallel to the vertical axis B;

{right arrow over (W**)} is the wind estimator that is frozen or reset.

Based on the estimated pressure altitude Z_(p)**, and on the frozen standard temperature deviation ΔISA_(tf)** the surrounding static temperature SAT**=SAT_(std)(Z_(p)**)+ΔISA_(tf)** and the estimated speed of sound √{square root over (γR·SAT**)} are also estimated.

The low Mach M** is then determined from the low true air speed and the estimated speed of sound, by means of the relationship:

$\begin{matrix} {{M^{**}\left( {t > t_{f}} \right)} = \frac{{TAS}^{**}(t)}{\sqrt{\gamma \; {R \cdot {SAT}^{**}}}}} & (42) \end{matrix}$

that is to say,

$\begin{matrix} {{M^{**}\left( {t > t_{f}} \right)} = \frac{\left. ||{\overset{->}{GS} + {{V_{Z}({GPS})}\overset{->}{k}} - \overset{->}{W_{tf}^{**}}} \right.||}{\sqrt{\gamma \; {R \cdot {SAT}^{**}}}}} & (43) \end{matrix}$

The low Mach M** is thus independent of any pressure value measured after time instant t_(f). The periodic calculation of the high Mach M_(n)* is interrupted, because this calculation depends on the incidence α.

Furthermore, a low speed equivalent, denoted by EV**, is determined from the low Mach M** and the reconstituted pressure altitude Z_(P)** in accordance with the relationship:

$\begin{matrix} {{\frac{1}{2}\rho_{0}{EV}^{**2}} = {\frac{1}{2}\gamma \; P_{S}^{**}M^{**2}}} & (44) \end{matrix}$

The low speed equivalent EV** is thus obtained from the low Mach M** and the reconstituted static pressure P_(S)** by means of the relationship:

${{EV}^{**} = {\sqrt{\frac{\gamma \; P_{S}^{**}}{\rho_{0}}}M^{**}}},$

the reconstituted static pressure P_(S)** itself being determined from the reconstituted pressure altitude Z_(P)** based on a standard atmosphere table.

In the state of low credibility 76, the flight parameters used directly or indirectly for the flight operation and control of the aircraft, at a time instant t_(v), thus are as follows:

the GPS pressure altitude Z_(P)**=Z_(GPS)−ΔZ_(tf)**;

the static temperature SAT**=SAT_(std)(Z_(p)**)+ΔISA_(tf)**;

the horizontal wind estimator {right arrow over (W**)} frozen at the value {right arrow over (W_(tf)**)} or reset;

the low Mach M**;

the low true air speed TAS**

the low speed equivalent EV**.

Thus, in low credibility mode, the only real time measurements used are those derived from the GPS sensor.

In order to refine the test 70 and to segregate the errors relating to the static pressure P_(S) or the total pressure P_(T), attributable to a malfunction of sensor probes, from an error relating to the measurement of the incidence α due to a malfunction of the incidence sensor 5 d, the computer 3 carries out a second test 78. This test 78 is performed following the completion of the test 70, during a limited time period d after the time instant t_(v) ^(k1), of 5 seconds for example.

This second test 78 is meant to be used for determining the credibility of the incidence α as measured in the phase 31.

This test 78 of incidence is performed by determining whether the equation of lift holds, by replacing in this equation the static pressure P_(S) measured by the static pressure sensor 5 a and the Mach number M_(a) determined by the Mach indicator 8 based on measurements made by the static and total pressure sensors, with corresponding auxiliary flight parameters.

These corresponding auxiliary flight parameters are the reconstituted static pressure P_(S)**, determined in accordance with the phase 45, and the low Mach M** determined during the step 76. Moreover, the coefficient of lift, denoted by {tilde over (C)}_(Z)**, is estimated from the value of the incidence α at time instant t_(v) determined during the phase 31 and the low Mach M**.

The test 78 includes the determination 80 of the ratio T₂ satisfying:

$\begin{matrix} {{T_{2}\left( {{t_{V}^{k\; 1} + d} > t_{V} > t_{V}^{k\; 1}} \right)} = \frac{{n_{Z}\left( {t_{V} + \varphi} \right)}{\overset{\sim}{m}\left( t_{V} \right)}g}{0.7\; P_{S}^{**}{M^{**2}\left( t_{V} \right)}{{\overset{\sim}{C}}_{Z}^{**}\left( t_{V} \right)}}} & (45) \end{matrix}$

where {tilde over (C)}_(Z)**(t_(v))={tilde over (C)}_(Z)(α(t_(v)),M**(t_(v)), conf).

This step 80 is followed by a step 82 during which the computer 3 verifies the inclusion of T₂, in the interval ]1−ε₂;1+ε₂[ where ε₂ is a predetermined tolerance parameter, for example equal to ε₁.

The ratio T₂ does not depend on the static pressure and the Mach number measured. Thus, a deviation of T₂ from the expected theoretical value 1 specifically incriminates the measurement of incidence α, because it is the only measurement subsequent to t_(v) ^(k1) other than the measurements derived from the GPS sensors, which for their part are assumed to be reliable. If T₂

]1−ε₂;1+ε₂[, the computer 3 identifies a failure of the incidence sensor 5 d, not excluding a failure of pressure sensors. The computer 3 thus maintains the state of low credibility 76.

The auxiliary display device 14 then displays the auxiliary flight characteristics not requiring involvement of the measurements derived from the pressure sensors 5 a, 5 b and the incidence sensor 5 d, these measurements being considered to be unreliable. Thus, each of the flight characteristics requiring involvement of one of these measurements in the state of optimal credibility is replaced by a homologous characteristic, i.e., one representative of the same flight characteristic, on the auxiliary display device 14.

For example, the pressure altitude Z_(P), the Mach number M_(a) and the indicated air speed IAS are replaced on the auxiliary display device 14 by homologous characteristics, which are respectively the reconstituted pressure altitude Z_(P)** or the altitude Z_(GPS), depending on the choice of the pilot, the low Mach number M**, and the low speed equivalent EV.**

In addition, the flight path angle γ_(air) and the incidence α are no longer displayed, and thus disappear from the auxiliary display device 14.

Furthermore, the indicated stall speed IAS_(s) is replaced by a low stall speed equivalent EV_(S)** on the basis of the current load factor n_(z). The low stall speed equivalent EV_(S)** is determined by the computer 3 as a function of the current load factor n_(z) and a stall speed equivalent EV_(S0) under an acceleration of 1g, in accordance with the relationship:

EV _(S) **=EV _(S0)√{square root over (n _(Z))}  (46)

The stall speed equivalent EV_(S0) is obtained from a stall table depending on the estimated weight {tilde over (m)} of the aircraft 1. Moreover, the auxiliary display device 14 displays a warning-alert message meant to inform the pilot of the state of low credibility. This message thus indicates to the pilot that the measurements of the pressure sensors and the incidence sensor are not reliable, and that the speeds displayed by the conventional aircraft instrumentation are probably incorrect.

If on the contrary, T₂ε]1=ε₂;1+ε₂[, and subject to the proviso that an additional test assessing dynamic consistency of the incidence measured with the load factor, detailed here below, has not furnished a negative result for a predetermined time period, for example 5 minutes, the computer 3 excludes a case of failure of the incidence sensor 5 d which implies a failure of at least one of the static and total pressure sensors. The computer 3 thus lifts the state of low credibility, and activates in a step 83 a state of high credibility 84.

During the transition 83, the auxiliary display device 14 displays a warning-alert message meant to inform the pilot of the state of high credibility. This message indicates that the measurements of the pressure sensors are not reliable, and that the speeds displayed by the conventional aircraft instrumentation are probably incorrect.

In this state of high credibility 84, the flight parameters determined at a time instant t_(v) are independent of the values of static and total pressure derived from sensors at this time instant t_(v), but may depend on the incidence reading derived from the incidence sensor 5 d.

During the transition 83 from a state of low credibility 76 to a state of high credibility 84, the computer 3 reinitialises the calculation of the sequence of high Machs, interrupted in the state of low credibility, based on an initial term M₁* corresponding to the last value of the low Mach number before the transition 83. The initial term M₁* is thus updated each time that the state of high credibility 84 is activated.

The static temperature SAT_(n)* is once again evaluated in accordance with the expression:

$\begin{matrix} {{SAT}_{n}^{*} = \frac{{TAT}\left( t_{V} \right)}{\left( {1 + {0.2\; M_{n}^{*2}}} \right)}} & (47) \end{matrix}$

In addition, the computer 3 resumes the determination of the standard temperature deviation estimator ΔISA_(n)*, suspended in the state of low credibility on account of the unavailability of the high Mach number M_(n)*. This estimator is determined in accordance with the step 50 described above.

The calculator 3 also resumes the calculation of the wind estimator {right arrow over (W_(n)*)}, periodically assessing the wind speed relative to the ground, in accordance with the phase 51 here above. This calculation does indeed call for the high Mach number and the high static temperature SAT_(n)*, which are once again available.

The high true air speed TAS_(n)* is determined based on the high Mach number M_(n)* and the static temperature SAT_(n)* in accordance with the expression (23) here above.

In addition, a high speed equivalent, denoted by EV_(n)*, is determined from the high Mach number M_(n)* and the reconstituted pressure altitude Z_(P)** in accordance with the relationship:

$\begin{matrix} {{\frac{1}{2}\rho_{0}{EV}_{n}^{*2}} = {\frac{1}{2}\gamma \; P_{S}^{**}M_{n}^{*2}}} & (48) \end{matrix}$

Thus, the flight parameters used directly or indirectly for the flight operation and control of the aircraft 1 in high credibility mode are as follows:

the GPS pressure altitude Z_(P)**=Z_(GPS)−ΔZ_(tf)**;

the static temperature SAT_(n)*;

the measured incidence α;

the high Mach M_(n)*;

the high true air speed TAS_(n)*;

the high speed equivalent EV_(n)*.

In the high credibility state 84, the auxiliary display device 14 displays the auxiliary flight characteristics not requiring involvement of the measurements derived from the pressure sensors. Thus, each of the flight characteristics requiring involvement of a measurement made by a pressure sensor in the state of optimal credibility is replaced by a homologous characteristic on the auxiliary display device 14, independent of any measurement made by pressure sensors in the state of high credibility.

For example, the pressure altitude Z_(P) is replaced on the auxiliary display device 14 by a homologous characteristic, which is the reconstituted pressure altitude Z_(P)** or the altitude Z_(GPS), depending on the choice of the pilot. The Mach number M_(a) is replaced by the high Mach number M_(n)* and the indicated air speed IAS is replaced by the high speed equivalent EV_(n)*.

The flight path angle γ_(air) and the incidence α continue to be displayed.

The auxiliary display device 14 displays in addition, a high stall speed equivalent denoted by EV_(S)*, determined by the computer 3 in an analogous manner to the indicated stall speed IAS_(s), based on the high speed equivalent EV_(n)*, the current stall incidence α_(s) and incidence α, in accordance with the relationship:

$\begin{matrix} {{EV}_{S}^{*} = {{EV}_{n}^{*}\sqrt{\frac{\alpha - \alpha_{0}}{\alpha_{S} - \alpha_{0}}}}} & (49) \end{matrix}$

The determination of these flight characteristics and the ambient air thus make it possible to provide data and information to the pilot of the aircraft while eliminating reliance on static and total pressure measurements that may potentially have been erroneously made by the sensors.

As previously described, in the state of high credibility, the total temperature measured by the sensor 5 c and the incidence measured by the sensor 5 d are considered to be reliable, which provides the ability, by way of calculating the reconstituted pressure altitude Z_(P)**, to determine a Mach number (high Mach number) and a true air speed (high true air speed) of the aircraft. These speed data values may be used to determine an image of the atmosphere, and in particular a horizontal wind estimator and a standard temperature deviation estimator.

Conversely, in the state of low credibility, the total temperature measured by the sensor 5 c and incidence measured by the sensor 5 d are considered to be unreliable. The reconstituted pressure altitude Z_(P)**, the horizontal wind estimator and the standard temperature deviation estimator are then frozen at the latest known reliable values, it being however possible for the reconstituted pressure altitude Z_(P)** and the horizontal wind estimator to be reset. In addition, the frozen value of the standard temperature deviation ΔISA_(n)*; (as determined in the state of high credibility) may be used for estimating a static temperature from the reconstituted pressure altitude Z_(P)**. The knowledge of this simplified image of the atmosphere then provides the ability to determine a Mach number (low Mach) and a speed equivalent (low speed equivalent) of the aircraft.

Whatever be the state of high or low credibility effectively prevalent in the system, the computer 3 implements additional tests in order to assess, in a periodic manner, the credibility of data and information provided by the pressure sensors and/or the incidence sensor; to detect any eventual changes in this credibility status; and to confirm or modify a state of low or high credibility.

In the state of low credibility 76, the measurements deriving from the pressure sensors 5 a and 5 b and incidence sensor 5 d are considered to be unreliable. In order to reassess the credibility of these measurements, the computer 3 evaluates the reliability of the measurement of incidence α in a repeated manner.

If this measurement is considered to be unreliable, the computer 3 maintains the state of low credibility.

If on the contrary, this measurement is considered to be reliable, the computer 3 lifts the state of low credibility, and activates a state of high credibility 84, in which only the pressure measurements are considered to be unreliable.

In the state of high credibility 84, the measurements deriving from the pressure sensors 5 a, 5 b are considered to be unreliable, while the measurements of the incidence sensor 5 d are believed to be reliable. If the incidence measurements are considered to be reliable during the assessment by means of additional tests, the computer 3 maintains the state of high credibility 84. If on the contrary the incidence measurements are considered to be unreliable during the assessment by means of additional tests, the computer 3 activates the state of low credibility 76.

The steps implemented by the computer 3 in order to assess the reliability of measurements made by the incidence sensor 5 d in the state of high 84 or low 76 credibility are illustrated in FIG. 4.

This reassessment is based on two credibility tests of incidence.

A first test 90 measures the dynamic consistency of the incidence measured α with the load factor n_(z).

A modification of the incidence α results in a variation of the load factor n_(z), with a slight delay denoted by φ. If one considers a sample of time, during which the incidence varies by dα, that is sufficiently short in order for the values m and P_(S)M_(a) ²m to be regarded as constants, the derivation of the equation of lift over this sample of time gives:

$\begin{matrix} {{dn}_{Z} = {\left( \frac{0.7\; {SP}_{S}M_{a}^{2}}{mg} \right)\left( \frac{\partial{\overset{\sim}{C}}_{Z}}{\partial\alpha} \right){\alpha}}} & (50) \end{matrix}$

If in addition, one considers that the quantity

$\left( \frac{\partial{\overset{\sim}{C}}_{Z}}{\partial\alpha} \right)$

is constant over the sample of time, dn_(Z)=K·dα is obtained, where K is a constant. Consequently, if the value of the incidence measured by the incidence sensor 5 d is correct, this incidence must therefore be an affine function of the load factor n_(Z) over a short sample of time. The test 90, is thus based on the assessment of the covariance between the incidence and the load factor n_(z), measuring the correlation between these two parameters.

The test 90 includes a step 92 of determination of the applicability of the test 90, a step 94 of calculating a correlation coefficient between the load factor and the incidence, and a step 96 of comparison of this correlation coefficient to a predetermined threshold value.

The test 90 can only be performed if the incidence and the load factor vary sufficiently over the sample of time considered.

Determination 92 of the applicability of the test 90 includes the assessment of a variance of the load factor n_(z), measuring the dispersion of the load factor n_(z) around its mean over a selected interval of time, and known as gross empirical energy.

The time interval is for example equal to 2.5 seconds. The gross empirical energy ε_(n) _(z) of the load factor is given by:

$\begin{matrix} {ɛ_{n_{Z}}^{2} = {\frac{1}{100}{\sum\limits_{k = 1}^{100}\; \left( {{n_{Z}\left( {t_{0} + \frac{k}{40} + \varphi} \right)} - \overset{\_}{n_{Z}}} \right)^{2}}}} & (51) \end{matrix}$

where n_(Z) , the mean of the load factor n_(z) over the interval [t₀+φ; t₀+2.5+φ] is given by:

$\begin{matrix} {\overset{\_}{n_{Z}} = {\frac{1}{100}{\sum\limits_{k = 1}^{100}\; {n_{Z}\left( {t_{0} + \frac{k}{40} + \varphi} \right)}}}} & (52) \end{matrix}$

φ is the phase shift between the load factor and the incidence and t₀ is a time instant of measurement chosen. φ is for example equal to 0.01 second. This phase shift φ is dependent on the aircraft type. It is determined once and for all in whole or part for the flight envelope in order to maximise on average, in the part of the flight envelope considered, the correlation between α (t) and n_(z)(t+φ).

During the step 92, the computer 3 subsequently compares the value of the gross empirical energy ε_(n) _(z) of the load factor to a predetermined minimum threshold value ε_(n) _(z min) . The threshold value ε_(n) _(z min) is for example comprised between 0.01 and 0.02, advantageously equal to 0.015.

If ε_(n) _(z) <ε_(n) _(z min) , the test 90 is not continued. In effect, it is then estimated that the incidence and the load factor do not vary enough over the time interval chosen so as to enable the assessment of their correlation. The computer 3 then repeats the step 92 until the test 90 can be appropriately performed. Alternatively, the test 90 may be continued but the results shall not be taken into account.

If ε_(n) _(z) ≧ε_(n) _(z min) , the computer 3 continues the test 90 and proceeds to the step 94.

The step 94 of calculating a correlation coefficient between the load factor and the incidence includes the calculation of a gross empirical covariance between the incidence α and the load factor n_(z) over a sliding sample of measured values.

The gross empirical covariance Cov_(φ)(n_(Z),α) between n_(Z)(t+φ) and α(t) at time instant t=t₀ is determined in accordance with the expression:

$\begin{matrix} {{{{Cov}_{\varphi}\left( {n_{Z},\alpha} \right)} = {\frac{1}{100}{\sum\limits_{k = 1}^{100}\; {\left( {{n_{Z}\left( {t_{0} + \frac{k}{40} + \varphi} \right)} - \overset{\_}{n_{Z}}} \right)\left( {{\alpha \left( {t_{0} + \frac{k}{40}} \right)} - \overset{\_}{\alpha}} \right)}}}}{{where}\mspace{14mu} \left\{ {\begin{matrix} {\overset{\_}{n_{Z}} = {\frac{1}{100}{\sum\limits_{k = 1}^{100}\; {n_{Z}\left( {t_{0} + \frac{k}{40} + \varphi} \right)}}}} \\ {{\overset{\_}{\alpha} = {\frac{1}{100}{\sum\limits_{k = 1}^{100}\; {\alpha \left( {t_{0} + \frac{k}{40}} \right)}}}}\mspace{59mu}} \end{matrix}.} \right.}} & (53) \end{matrix}$

Based on these quantities, the computer 3 during the step 94 determines a gross coefficient of correlation Corr_(φ)(n_(Z), α) between the load factor and the incidence, in accordance with the expression:

$\begin{matrix} {{{Corr}_{\varphi}\left( {n_{Z},\alpha} \right)} = \frac{{Cov}_{\varphi}\left( {n_{Z},\alpha} \right)}{ɛ_{n_{Z}}ɛ_{\alpha}}} & (54) \end{matrix}$

where ε_(α) denotes the gross empirical energy of the incidence α in the interval of time [t₀; t₀+2.5], given by:

$ɛ_{\alpha}^{2} = {\frac{1}{100}{\sum\limits_{k = 1}^{100}\; {\left( {{\alpha \left( {t_{0} + \frac{k}{40}} \right)} - \overset{\_}{\alpha}} \right)^{2}.}}}$

The coefficient of correlation is by definition comprised in the interval [−1;+1]. The closer the value thereof is to 1, the greater is the correlation between the incidence and the load factor.

The phase shift φ is tabulated so as to include a plurality of values depending in particular on the flight envelop considered.

Then, in the step 96, the computer 3 compares the coefficient of correlation determined during the step 94 to a predetermined correlation threshold Corr_(min).

If Corr_(φ)(n_(Z), α)<Corr_(min), the test 90 is negative and the incidence is considered to be unreliable.

If Corr_(φ)(n_(Z), α)≧Corr_(min), the test 90 is positive. The temporal variations of the measurements of the incidence sensor are considered to be reliable.

This test 90 thus provides highly reliable information regarding the vitality of the incidence and its temporal coherence with the load factor.

However, when this test is positive, a permanent variation between the measured incidence value and the actual value is not excluded.

Reassessment of the reliability of the incidence sensor 5 d thus includes a second test 100 of incidence, verifying the consistency between the measured incidence α and the pitch angle θ of the aircraft, in straight and level flight.

This test 100 includes a step 102 of determining the relevance of the test 100 and a step 106 of comparing the measured incidence α and the pitch angle θ of the aircraft when the test is relevant.

The test 100 may be performed when the aircraft is flying a straight and level path, that is to say when the flight path angle γ_(air) of the aircraft and its bank angle φ are close to zero. The step 102 thus includes the comparison of the flight path angle γ_(air) of the aircraft and its bank angle φ to predetermined threshold values.

The flight path angle γ_(air) of the aircraft is estimated from measurements derived from the GPS sensor. To this end, the computer 3 determines a vertical speed Ż_(P)** of the aircraft, derived from the reconstituted pressure altitude, and a Mach number of the aircraft, which may be either the low Mach M** in the state of low credibility 76, or the high Mach M_(n)* in the state of high credibility 84. The computer 3 then determines the ratio

${Pa} = {{\frac{\left| {\overset{.}{Z}}_{P}^{**} \right|}{M^{**}}\mspace{14mu} {or}\mspace{14mu} {Pa}} = {\frac{\left| {\overset{.}{Z}}_{P}^{**} \right|}{M_{n}^{*}}.}}$

proportional to the sine of the flight path angle γ_(air), and compares this ratio against a threshold value P_(max). The tolerance is for example equal to 0.4°.

Furthermore, the inertial navigation unit provides to the computer 3 the value of the bank φ of the aircraft. The computer 3 then compares this bank angle to a threshold value φ_(max), for example equal to 5°.

If φ>φ_(max) and/or Pa>P_(max) the test 100 is not continued. The computer 3 then repeats the step 102 until the test 100 can be appropriately performed. If φ≦φ_(max) and P≦P_(max), the test 100 may be continued and the computer 3 proceeds to the step 106.

When φ≦φ_(max) and Pa≦P_(max), that is to say when the flight path angle and the bank angle of the aircraft are almost nil, if the vertical wind component were to be disregarded, the pitch angle θ of the aircraft is substantially equal to its incidence.

During the step 106, the computer 3 assesses the reliability of the incidence sensor 5 d, by comparing the pitch angle θ, determined by means of the inertial navigation unit, to the incidence α measured by the incidence sensor 5 d. For example, the computer 3 determines the difference (θ−α) and verifies that this difference is close to the value 0, that is to say is that it is less than a threshold ε₃ in absolute value, where ε₃ is a predetermined number defining the deviation permissible. Just as an example ε₃=1° could be considered.

If |θ−ε|>ε₃, the test 100 is negative. The computer 3 then repeats the step 80 until a positive result has been obtained.

If |θ−α|≦ε₃, the test 100 is positive.

This test 100 may be used to validate the absolute value of the incidence in a straight and level flight. It thus allows for eliminating constant errors with respect to the value of the incidence.

The tests 90 and 100 are repeated on a continuous and ongoing basis by the computer 3.

The two tests 90 and 100 are not always able to provide a result in a concomitant manner. Indeed, the test 90 of correlation between the incidence and the load factor is applicable when the load factor varies, while the test 100 of comparison between the incidence and the pitch angle is applicable when the aircraft is in straight and level flight. The positive results for these two tests are not necessarily obtained together.

Thus, when the computer 3 obtains a positive result in one of the tests 90, 100, it activates 107 an intermediate state and stores this result for a predetermined time period Δt, while awaiting a positive or negative result in the other of these tests 100, 90. The time period Δt, is for example equal to 5 minutes (300 s).

If a positive result is obtained for the second of these tests 100, 90 during this time period Δt, the computer 3 considers that measurements of the incidence sensor 5 d are reliable. It is to be noted that if these results are obtained during the interval [t_(v) ^(ki), t_(v) ^(ki)+d], that is to say, during the time period d after a negative test 70, they are not taken into account.

If the operationally prevalent state of credibility is the state of high credibility 84, the computer maintains this state.

If the operationally prevalent state of credibility is the state of low credibility 76, the computer 3 lifts this state of low credibility and 76 activates the state of high credibility 84, described previously above. In particular, the transition between these two states is similar to the transition 83 described previously above. The permanent test 70 is then reactivated upon entry into high credibility mode.

Moreover, the auxiliary display device 14 displays the auxiliary flight characteristics that are appropriate to this state of high credibility 84. In particular, the GPS pressure altitude Z_(P)** continues to be displayed, but the low Mach number M** is replaced by the high Mach number M_(n)*, and the low speed equivalent EV** is replaced by the high speed equivalent EV_(n)*.

In addition, the flight path angle γ_(air) and the incidence α are again displayed by the auxiliary display device. Finally, the high stall speed equivalent EV_(S)* is again determined from incidence measurements deriving from the incidence sensor.

Moreover, the auxiliary display device 14 displays a warning-alert message meant to inform the pilot of the state of high credibility. This message indicates to the pilot that the measurements of the pressure sensors 5 a, 5 b are not reliable, and that the speeds displayed by the conventional aircraft instrumentation are probably incorrect.

If no positive result is obtained for the second of these tests 100, 90 during the time period Δt, the computer 3 considers that the measurements of the incidence sensor 5 d are not reliable.

If the operationally prevalent state of credibility is the state of low credibility 76, the computer maintains this state of low credibility 76 and repeats the tests 90 and 100.

If the operationally prevalent state of credibility is the state of high credibility 84, the computer 3 activates the state of low credibility 76.

Notably, during the transition 75 to the state of low credibility 76, the values of the wind estimator {right arrow over (W_(n)*)}, of the standard temperature deviation ΔISA_(n)* and the pressure altitude offset ΔZ**(j) are frozen to the last known reliable values, which are for example those that are determined at a time instant t_(f) prior to the negative test 90 or 100. The reconstituted pressure altitude Z_(P)** and the horizontal wind estimator may however be reset as described here above.

Moreover, the auxiliary display device 14 displays the auxiliary flight characteristics that are appropriate to this state of low credibility 76. In particular, the GPS pressure altitude Z_(P)** continues to be displayed, but the high Mach number M_(n)* is replaced by the low Mach number M**, and the high speed equivalent EV_(n)* is replaced by the low speed equivalent EV**.

In addition, the flight path angle γ_(air) and the incidence α are no longer displayed, and disappear from the auxiliary display device 14. Finally, the low stall speed equivalent EV_(S)** is obtained from a stall table based on the current load factor n_(z) and a stall speed equivalent EV_(S0) under an acceleration of 1g. The stall speed equivalent EV_(S0) is obtained from a stall table based on the estimated weight {tilde over (m)} of the aircraft 1.

Moreover, the auxiliary display device 14 displays a warning-alert message meant to inform the pilot of the state of low credibility. This message indicates to the pilot that the measurements of the pressure and incidence sensors are not reliable, and that the speeds displayed by the conventional aircraft instrumentation are probably incorrect.

The combination of tests 90 and 100, respectively measuring the correlation between the incidence and the load factor and the coherence between the incidence and the pitch angle in level flight, thus ensure the ability to assess the reliability of measurements of incidence by the incidence sensor 5 d.

As previously described above, the state of low credibility 76 is activated when the first test 70 and the second test 78 successively prove negative.

The state of low credibility 76 is also activated in a systematic manner upon take off, and during each change of configuration of the aircraft 1. After take off, the state of low credibility 76 is lifted and the state high credibility 84 is activated as soon as the “second segment” configuration is reached, subject to the proviso that the test 90 of correlation between the incidence and the load factor is not negative. In similar fashion, as soon as the change of configuration of the aircraft 1 is completed, the state of low credibility 76 is lifted and the state high credibility 84 is established, subject to the proviso that the test 90 of correlation between the incidence and the load factor is not negative.

Moreover, in the state of high credibility 84, the computer 3 reassesses the reliability of the pressure sensors 5 a, 5 b. These tests are implemented in a continuous and ongoing manner in the state of high credibility 84.

In order to reassess the reliability of the pressure sensors in the state of high credibility, the computer 3 implements two tests 110, 112, as shown in FIG. 5.

In a first test 110 of the pressure sensors, the computer 3 compares the Mach number Ma obtained by the Mach indicator 8 at a given time instant from values of total and static pressure, to the high Mach number M_(n)* obtained at the same time instant, which does not depend on these pressures. Indeed, if the measured pressure values are correct, these two speeds should be substantially equal.

Thus, during the test 110, the computer 3 determines the Mach number M_(a) in accordance with the phase 31 here above, and the high Mach number M_(n)*, in accordance with the step 49 above. The computer 3 then determines the ratio

$\frac{M_{a}}{M_{n}^{*}},$

and verifies that this ratio is close to the value 1, that is to say, is comprised within an interval ]1−ε₄;1+ε₄[, where ε₄<<1, is a predetermined number defining the permissible deviation.

If

${{\left. {\frac{M_{a}}{M_{n}^{*}} \notin} \right\rbrack 1} - ɛ_{4}};{1 + {ɛ_{4}\left\lbrack , \right.}}$

the test 110 is negative. The measured values of pressures are considered to be unreliable, and the state of high credibility is maintained.

If

${{\left. {\frac{M_{a}}{M_{n}^{*}} \in} \right\rbrack 1} - ɛ_{4}};{1 + {ɛ_{4}\left\lbrack , \right.}}$

the test is positive.

The second test 112 of pressure sensors is complementary to the first test 110. During this test 112, the computer 3 compares the pressure altitude Z_(P) obtained at a given time instant from the measurement of the static pressure to the GPS pressure altitude Z_(P)** obtained at the same time instant, which is not dependent on the measurement of static pressure. If the measured static pressure value is correct, these two pressure altitudes should be substantially equal.

Thus, during the test 112, the altimeter 6 provides to the computer 3 the pressure altitude Z_(P) in accordance with the phase 31 here above, and the computer 3 determines the GPS pressure altitude Z_(P)**, in accordance with the step 47 here above. The computer 3 then determines the difference Z_(P)**−Z_(P), and verifies that this ratio is close to zero, that is to say, it is comprised in an interval ]−ε₅;+ε₅[, where ε₅ is a predetermined number defining the permissible deviation.

If Z_(P)**−Z_(P)

]−ε₅; +ε₅[, the test 112 is negative. The measured static pressure value is considered to be unreliable, and the state of high credibility is maintained.

If Z_(P)**−Z_(P)ε]−ε₅;+ε₅ [, the test 112 is positive.

In a step 113, the computer determines if two tests 110 and 112 substantially concurrent, for example carried out in an interval of time of the order of the second, are positive. If this is the case, the measurements of the pressure sensors are considered to be reliable. The computer 3 thus lifts the state of high credibility and activates the state of optimal credibility 74, described here above.

In the contrary case, the state of high credibility 84 is maintained.

Thus, during a configuration change or at take off, once the state of low credibility is lifted and the state of high credibility is established, the state of optimal credibility may be achieved if the tests 110 and 112 prove to be positive.

These two tests 110 and 112 thus provide the ability to reassess the credibility of pressure measurements during the flight, when these measurements have been deemed to not be credible, and to provide the pilot with data and information derived from these measurements when the pressure sensors are functioning again. Moreover the use of two additional tests also ensures better security.

Represented in FIG. 6 is an auxiliary display device 14 according to one embodiment of the invention.

As previously described, the auxiliary display device 14 is connected to the system 2 and in particular to the computer 3 of the aircraft 1, and receives information and commands from the latter.

The auxiliary display device 14 comprises the means 15 suitable for displaying evaluations of values of speed, altitude, incidence and flight path angle, selected based on estimations of the reliability of incidence and pressure sensors and transmitted by the computer 3. Such means 15 form a visual display device.

The auxiliary display device 14 displays, in the state of optimal credibility, so called “principle” flight characteristics of the aircraft, such as speed, altitude and Mach number, obtained from measurements made by the static pressure sensor 5 a, total pressure sensor 5 b and incidence sensor 5 d.

When the measurements of at least one of these sensors are considered to be unreliable, each “principle” flight characteristic obtained from measurements of this sensor is replaced on the display device by an “auxiliary” flight characteristic homologous to the principle flight characteristic replaced, ie representative of the same flying characteristic and independent of any measurement from the sensor considered to be unreliable performed when the measurements of this sensor are considered to be unreliable.

Thus, the indicated air speed IAS is replaced by a speed (the high speed EV_(n)* or low speed EV** equivalent), the pressure altitude Z_(P) is replaced by an altitude (GPS pressure altitude Z_(P)** or the altitude above the reference geoid Z_(GPS)), and the Mach number M_(a) is replaced by a Mach number (high Mach number M_(n)* ou low Mach M**)

The FIGS. 6, and 7 and 8 thus represent information projected on the device 15, displayed in the form of symbols, during the implementation of the method described above, when the aircraft 1 is in the state of optimal credibility 74, in the state of high credibility 84 and in the state of low credibility 76 respectively.

These symbols include an indicator 122 of flight control, displaying a symbol 124 of the aircraft model, occupying a constant position, which embodies a projection to infinity of the longitudinal axis X of the aircraft 1, and an artificial horizon line 126, in the centre of a scale slope 128. The position of the line 126 relative to the symbol 124 represents the pitch angle θ of the aircraft 1, this pitch angle being shown on the gradient scale 128 next to the artificial horizon line 126.

The indicator 122 also includes a velocity vector symbol 130, indicating the direction of the velocity vector of the aircraft relative to the air. This symbol 130 is located along the graduated gradient scale 128. The gap on the graduated gradient scale 128 between the symbol 124 of the model and the symbol 130 of the velocity vector is equal to the incidence α of the aircraft 1.

Advantageously, the symbols of model 124 and speed 130 are displayed only in the states of optimal credibility 74 or high credibility 84. The flight path angle and the incidence of the aircraft 1 are thus not displayed in the state of low credibility 76.

The device 15 also displays a speedometer 132. This indicator 132 includes a graduated speed scale 134, represented in the form of a segment extending between two fixed points, and a speed symbol 136 arranged facing the speed scale 134. The speed symbol 136 indicates a speed of the aircraft 1. The symbol 136 has for example a chevron shape.

One symbol 138, indicating in digital form the value of the speed, is added next to the speed symbol 136.

The indicated air speed depends on the state of credibility established by the computer 3. The speed displayed by means of the speed symbol 136 is for example the indicated air speed IAS in the state of optimal credibility 74, the high speed equivalent EV_(n)*, in the state of high credibility 84 and the low speed equivalent EV** in the state of low credibility 76.

A symbol 141, disposed at the bottom of the graduated speed scale 134, indicates a Mach number of the aircraft. The type of Mach number displayed depends on the current state of credibility. In the state of optimal credibility 74, it is the Mach number M_(a) derived from the Mach indicator 8, in the state of high credibility 84, the high Mach number M_(n)* is displayed, and in the state of low credibility 76, the low Mach number M** is displayed.

The symbols 138 and 141 are provided with an identification representative of the speed type and Mach number displayed, advantageously a colour code, in a manner such as to inform the pilot of the type of speed available to them. The selected colour code indicates in an intuitive manner what types of speed and Mach number are displayed. For example, the symbols 138 and 141 are green with green border in the state of optimal credibility 74, that is, when the indicated air speed IAS and the Mach number M_(a) are displayed, green with yellow border in the state of high credibility 84, that is, when the high speed equivalent EV_(n)* and the high Mach number M_(n)* are displayed, and yellow with yellow border in the low credibility state 76, that is, when the low speed equivalent EV** and low Mach number M** are displayed.

As shown in FIG. 6, in the optimal state of credibility, the device 15 further displays, superimposed on the speedometer 132, a band 139 a indicating the indicated stall speed IAS_(s) of the aircraft 1. The band 139 a is for example red in colour. In the state of high credibility 84, an identical band 139 a indicates the high stall speed equivalent EV_(S)*.

In the state of low credibility 76, the band 139 a is replaced by a discontinuous 139 b red band, as shown in FIG. 8. The band 139 b shows the low stall speed equivalent EV_(S)** described here above.

The device 15 also displays an altitude indicator 140. This indicator 140 comprises a graduated altitude scale 142, represented in the form of a segment extending between two fixed points, and an altitude symbol 144, disposed opposite the altitude scale 142. The altitude symbol 144 indicates an altitude of the aircraft 1. The symbol 144 has for example a chevron shape.

A symbol 146 indicating in numerical form the value of the altitude, is added next to the altitude symbol 144.

The indicated altitude depends on the state of credibility established by the computer 3. In the state of optimal credibility 74, the altitude displayed by means of the altitude symbol 144 is, for example the pressure altitude Z_(P) or, at the choice of the pilot, a corrected altitude of the setting, denoted by Z_(C). The setting is for example a QNH (Q code—Nautical Height) or QFE (Q code—Field Elevation) setting. The QFE is an international code to be used for the setting of the altimeter in relation to a given land area such that it indicates a zero altitude when the aircraft is on the ground in this land area.

In the state of high credibility 84 or low credibility 76, the altitude displayed by means of the altitude symbol 144 is the GPS pressure altitude Z_(P)** or, at the pilot's choice, the altitude above the reference geoid Z_(GPS), given by the GPS sensor.

Such choices between Z_(P) or Z_(C) and Z_(P)** or Z_(GPS) can be made by means of the input interface 17, for example by pressing a dedicated button.

The device 15 then indicates, in a reserved locational position 150, on which reference the altitude is set. For example, in the state of optimal credibility 74, if the displayed altitude is the pressure altitude Z_(P), the setting “STD” is displayed in the location 150, as shown in FIG. 6. If the altitude displayed is a corrected altitude of the setting Z_(C), “QNH” or “QFE” is displayed in the location 150, depending on the setting selected.

In the state of high credibility 84 or low credibility 76, if the GPS altitude pressure Z_(P)** is displayed, the setting “STD” is displayed in the location 150, as represented in FIG. 7. If the altitude Z_(GPS) above the reference geoid is displayed, the setting “GEO” is displayed in the location 150, as represented in FIG. 8.

The symbol 146 is provided with an identification representative of the type of altitude displayed, advantageously a colour code. The selected colour code indicates in an intuitive manner what type of speed is displayed. For example, the symbol 146 is green with green border in the state of optimal credibility 74, i.e. when the altitude Z_(P) or Z_(C) is displayed, green with yellow border when loose hybridisation of Z_(P)** by Z_(P) is in progress, and yellow with yellow border when loose hybridisation of Z_(P)** by Z_(P) is stopped. The symbol 146 with yellow border thus signifies that the GPS altitude pressure Z_(P)** or the altitude above the reference geoid Z_(GPS) is displayed, and the colour of the symbol itself indicates whether the process of loose hybridisation of Z_(P)** on Z_(P) is in progress or not.

The auxiliary display device 14 is in addition supplemented by means 16 for displaying warning-alert messages as previously described above. These means 16 include, for example a display window 152, suitable for displaying text based messages intended to inform the pilot of the state of credibility assigned to sensor measurements, and the reliability of the measurements displayed by the conventional aircraft instrumentation panel. This window 152 is for example integrated within a system for alerting the crew (or CAS for Crew Alerting System).

For example, in the state of high credibility, the window 152 displays a message indicating to the pilot that the measurements of the pressure sensors 5 a, 5 b are not reliable, and a message indicating that the speeds displayed by the conventional aircraft instrumentation panel are probably incorrect. These messages are for example of the following type: “STATIC &/or total pressure input fail” and “M/IAS unreliable (caution))”, respectively, as illustrated in FIG. 7.

In the state of low credibility 76 the window 152 displays a message indicating to the pilot that the measurements of the pressure sensors 5 a, 5 b and incidence sensor 5 d are not reliable, and a message indicating that the speeds displayed by the conventional aircraft instrumentation panel are probably incorrect. These messages are for example of the following type: “AOA input fail” and “M/IAS unreliable (caution)”, respectively, as illustrated in FIG. 8. The auxiliary display device according to the invention therefore ensures the ability to provide the pilot at any time, with reliable flight operation and control information. Indeed, when the measurements of at least one sensor from the static pressure sensor (5 a), total pressure sensor (5 b) and incidence sensor (5 d) are considered to be unreliable, each flight characteristic determined on the basis of measurements made by these sensors is replaced on the auxiliary display device by an auxiliary flight characteristic. Each auxiliary flight characteristic is independent of any sensor measurement performed at a time when the sensor is considered to be unreliable.

Auxiliary flight characteristics may however depend on measurements of the or each sensor deemed to be unreliable that were performed at a prior time, when these sensors were considered to be reliable.

The auxiliary display device according to the invention also provides the ability to notify the crew in case of suspicion of failure of one or more sensors.

The method and system according to the invention thus ensures the ability to provide the crew of an aircraft with an assessment of the reliability of the flight characteristics deriving from measurements made by the aircraft's sensors, and to alert them in case of potential failure. Furthermore, this method and system provide the ability to reassess in a continual and ongoing manner the reliability of the sensors in order to detect a possible restoring to proper working order of sensors considered to be unreliable or conversely a failure of a sensor previously considered to be reliable.

The method and the system according the invention also ensure the ability to provide the crew with auxiliary flight characteristics that are independent of sensor measurements considered to be unreliable. Thus, even in case of failure of the pressure and/or incidence sensors, reliable values for flight characteristics are made available to the crew.

It should be understood that the examples of embodiments presented here above are non limiting.

In particular, verifying whether the equation of lift is satisfied in steps 70 and 78 may be carried out according to a form other than that previously described above. In particular, it may entail the involvement of another type of speed data value other than the Mach number M_(a).

Additionally, the auxiliary flight characteristics may be determined in accordance with other expressions, and possibly from other types of sensors aside from a GPS sensor, for example, another type of satellite positioning sensor, a Doppler radar, or an inertial navigation unit.

The coefficient of lift may also be projected onto a different axis than the axis Z represented, for example along an axis perpendicular to the velocity vector.

Furthermore, the auxiliary display device may display other auxiliary information, such as the static temperature or the horizontal wind estimator.

By way of a variant, the aircraft 1 comprises a plurality of redundant sensors of the same type, for example, multiple static and total pressure sensors and/or multiple incidence sensors. According to this variant, for example the computer tests the reliability of each of the sensors of the same type separately. Thus, if only one single sensor of a given type is considered to be reliable, the computer 3 uses the measurements deriving from this sensor, and alerts the pilot as to a failure of the other sensor(s) of the same type. If all of the sensors of a same given type are found to be unreliable, the computer 3 activates a state of high or low credibility as appropriate, in accordance with the method described above.

Quite obviously, other embodiments may be envisaged.

In addition, the technical characteristics of the embodiments and variants mentioned here above may be combined with each other. 

1-14. (canceled) 15: A device for displaying flight characteristics of an aircraft to a crew of the aircraft comprising: a display for the selective display of flight characteristics of the aircraft, as a function of a state of credibility assigned to measurements from sensors of the aircraft, the sensors comprising static pressure, total pressure and incidence sensors of the aircraft, the display configured for selectively displaying: a primary set of flight characteristics comprising at least one flight characteristic coming from at least one measurement from one of the static pressure, total pressure and incidence sensors, when the measurements from the static pressure, total pressure and incidence sensors are deemed reliable, and at least one secondary set of flight characteristics, distinct from the primary set, comprising at least one secondary flight characteristic designed to replace a counterpart flight characteristic from the primary set, when the measurements from at least one sensor from among the static pressure, total pressure and incidence sensors are deemed unreliable, the secondary flight characteristic being independent of any measurement by the or each sensor deemed unreliable done when the measurements from that sensor are deemed unreliable. 16: The display device as recited in claim 15 wherein the primary set of flight characteristics comprises at least one characteristic chosen from among: at least one piece of primary speed information of the aircraft determined from measurements by the static pressure and total pressure sensors, a primary altitude of the aircraft determined from measurements by the static pressure sensor, and an incidence of the aircraft, determined from measurements of the incidence sensor. 17: The display device as recited in claim 15 wherein the secondary set of flight characteristics comprises at least one characteristic chosen from among: at least one piece of secondary speed information independent of any measurement from the or each sensor deemed unreliable done when the measurements from that sensor are deemed unreliable, and a secondary altitude of the aircraft, independent of any measurement by the or each sensor deemed unreliable done when the measurements from that sensor are deemed unreliable. 18: The display device as recited in claim 15 wherein the secondary set of flight characteristics is chosen from among: a first secondary set of flight characteristics, when the measurements from the incidence sensor are deemed reliable and the measurements from at least one sensor from among the static pressure and total pressure sensors are deemed unreliable, and a second secondary set of flight characteristics, separate from the first secondary set, when the measurements from the incidence sensor are deemed unreliable. 19: The display device as recited in claim 15 wherein the display comprises at least one speed indicator, configured for selectively displaying: a piece of primary speed information of the aircraft determined from measurements from the static pressure and total pressure sensors, when the measurements from the static pressure and total pressure sensors are deemed reliable, a piece of secondary speed information independent of the measurements from the static pressure and total pressure sensors, when the measurements from at least one sensor from among the static pressure and total pressure sensors are deemed unreliable. 20: The display device as recited in claim 19 wherein the speed indicator comprises: a graduated speed scale, and at least one speed symbol, positioned across from the graduated speed scale, indicating a value of the piece of primary speed information when the measurements from the static pressure, total pressure and incidence sensors are deemed reliable, or the value of the piece of secondary speed information when the measurements from at least one sensor from among the static pressure, total pressure and incidence sensors are deemed unreliable. 21: The display device as recited in claim 15 wherein the display includes comprise an altitude indicator, configured for selectively displaying: a primary altitude of the aircraft, determined from measurements by the static pressure sensor, when the measurements from the static pressure, total pressure and incidence sensors are deemed reliable, and a standard calibration of the altitude is selected, a corrected altitude of the aircraft, determined from measurements by the static pressure sensor, when the measurements from the static pressure, total pressure and incidence sensors are deemed reliable, and a calibration different from the standard calibration is chosen, a first secondary altitude of the aircraft, when the measurements from at least one sensor from among the static pressure, total pressure and incidence sensors are deemed unreliable, and a standard calibration of the altitude is chosen, the first secondary altitude being dependent on static pressure measurements from the static pressure sensor if the sensor is deemed reliable, and independent of measurements from the static pressure sensor done when the measurements from that sensor are deemed unreliable, when the measurements from the static pressure sensor are deemed unreliable, and a second secondary altitude of the aircraft, when the measurements from at least one sensor from among the static pressure, total pressure and incidence sensors are deemed unreliable, and a calibration of the altitude above the geoid is chosen, the second secondary altitude being independent of the static pressure measurements from the static pressure sensor. 22: The display device as recited in claim 21 wherein that the altitude indicator comprises: a graduated altitude scale, at least one altitude symbol, positioned across from the graduated altitude scale, indicating the value of the primary altitude or the corrected altitude when the measurements from the static pressure, total pressure and incidence sensors are deemed reliable, or the value of the first or second secondary altitude when the measurements from at least one sensor from among the static pressure, total pressure and incidence sensors are deemed unreliable, and a symbol indicating the type of calibration of the altitude indicated by the altitude symbol. 23: The display device as recited in claim 15 further comprising an alert display configured for displaying alert messages capable of informing the crew, when the measurements from at least one sensor from among the static pressure, total pressure and incidence sensors are deemed unreliable, that the measurements are deemed unreliable. 24: The display device as recited in claim 23 wherein the alert messages are chosen from among visual signals and audio signals, the messages being text or symbolic messages displayed on a location dedicated to displaying of failure messages of the aircraft. 25: An instrumentation for an aircraft comprising: the display device as recited in claim 15; and a computer configured to compute the at least one secondary flight characteristic when the measurements from at least one sensor from among the static pressure, total pressure and incidence sensors of the aircraft are deemed unreliable, the secondary flight characteristic being independent of any measurement of the or each sensor deemed unreliable done when the measurements from that sensor are deemed unreliable. 26: A method for displaying flight characteristics of an aircraft intended for a crew of the aircraft by at least one of the displayed device as recited in claim 15, the method comprising: determining a state of credibility of measurements from sensors of the aircraft, and selectively displaying flight characteristics of the aircraft, as a function of the state of credibility assigned to the measurements, by at least one of the display device as recited in claim
 15. 27: The method as recited in claim 26 wherein the determining a state of credibility of measurements from sensors comprises: determining a state of reliability of the measurements from the static pressure, total pressure and incidence sensors; activating an optimal state of credibility, in which the display displays the primary set of flight characteristics, if the measurements from the static pressure, total pressure and incidence sensors are deemed reliable; and activating at least one non-optimal state of credibility, in which the display displays the secondary set of flight characteristics, if the measurements from at least one sensor from among the static pressure, total pressure and incidence sensors are deemed unreliable. 28: The method as recited in claim 27 wherein the secondary set of flight characteristics is chosen from among a first secondary set of flight characteristics and a second secondary set of flight characteristics, distinct from the first secondary set of flight characteristics, the determining a state of credibility of measurements from sensors comprising, when the non-optimal state of credibility is activated: determining a state of reliability of measurements from the incidence sensor; activating a state of high credibility, in which the display displays the first secondary set of flight characteristics, if the measurements from the incidence sensor are deemed reliable; and activating a state of low credibility in which the display displays the second secondary set of flight characteristics, if the measurements from the incidence sensor are deemed unreliable. 